Re: Connection Problem between Prelude-manager and remote sensor
Jaime Ventura <[email protected]> Tue, 04 May 2010 16:07:40 +0100
| Newsgroups | gmane.comp.security.ids.prelude.user |
|---|---|
| Message-ID | <[email protected]> |
The logs you send are just about the prelude-manager. And it seems like you cant even start it because prelude-manager cant bind to specified IP. On /etc/prelude-manager/prelude-manager.conf you have something like: listen = 0.0.0.0 You dont really need to change unless you have multiple IPs and want to bind prelude-manager to only one. If so you can change that line to listen = 192.168.233.134 but this IP must be applied on an interface of the server where you are running prelude-manager. If not, prelude-manager wont be able to bind to it either. If I understood correctly I, you want prelude-lml to run on a different e server. So you have to change /etc/prelude/default/client.conf on that different server. After taht, you need to register the prelude-lml. One final note, use the "reply all", so everyone receive the message. Jaime CHEVALIER, Guillaume wrote: > Oups its 192.168.233.134:4689 (It's just a mistake on the email) > I must have prelude-manager on 192.168.233.134? > For the moment I just prelude-lml > > > -----Message d'origine----- > De : Jaime Ventura [mailto:[email protected]] > Envoyé : mardi 4 mai 2010 16:16 > À : CHEVALIER, Guillaume > Cc : [email protected] > Objet : Re: [prelude-user] Connection Problem between Prelude-manager and remote sensor > > Hi, > I don't know if you changed the ip addresses on purpose, but: > > 192.168.233.134 must be a IP assigned to the machine(prelude-manager.conf). > > and > > on the file client.conf these's a missing octet. "192.168.132:4689" is not a valid IP:port. > > > Jaime > > > CHEVALIER, Guillaume wrote: > >> Hello, >> I installed prelude-manager 1.0, lml, correlator and prewikka on the same device. I installed prelude-lml on another device. I registered all plugins. I changed the /etc/prelude-manager/prelude-manager.conf to listen the remote device. ( I added listen 192.168.233.134:4689) >> I changed in /etc/prelude/default/client.conf server-addr with the IP of prelude-manager device.(server-addr = 192.168.132:4689). >> And this'd given : >> >> Debian:# /etc/init.d/prelude-manager restart >> Restarting prelude-manager : prelude-manager24 Apr 02 :14 :17 (process :5707) INFO : Subscribing Normalize to active decoding plugins. >> Failed! >> >> In user.log : >> Apr 24 02:14:17 debian prelude-manager : INFO: server started (listening on 127.0.0.1 port 4690). >> Apr 24 02:14:17 debian prelude-manager : WARNING: error initializing server on 192.168.134:4689: could not bind socket: Cannot assign requested address. >> Apr 24 02:14:17 debian prelude-manager : WARNING: option error: error while setting option 'listen': could not bind socket: Cannot assign requested address. >> >> Someone can help me ? >> Thank you >> >> Guillaume >> </PRE><p style="font-family:arial;color:grey" style="font-size:13px">This message contains information that may be privileged or confidential and is the property of the Capgemini Group. It is intended only for the person to whom it is addressed. If you are not the intended recipient, you are not authorized to read, print, retain, copy, disseminate, distribute, or use this message or any part thereof. If you receive this message in error, please notify the sender immediately and delete all copies of this message.</p><PRE> >> _______________________________________________ >> Prelude-user site list >> [email protected] >> http://lists.prelude-technologies.com/mailman/listinfo/prelude-user >> >> > > > > > > > This message contains information that may be privileged or confidential and is the property of the Capgemini Group. It is > intended only for the person to whom it is addressed. If you are not the intended recipient, you are not authorized to > read, print, retain, copy, disseminate, distribute, or use this message or any part thereof. If you receive this message > in error, please notify the sender immediately and delete all copies of this message. > > _______________________________________________ Prelude-user site list [email protected] http://lists.prelude-technologies.com/mailman/listinfo/prelude-user