Re: [sentinix-list] pb activation snort sensor

The usual cycle, when using SnortCenter, is this:

1. Out-of-the-box you can click "start", and that works, but only if you don't 
change anything (the SnortCenter db is already populated and the config file 
is there).

2. If you change some some config (anything) within SnortCenter (i.e. eth0 to 
eth1), you have to upload that configuration to the Sensor Agent in order for 
it to take effect (to create the snort.conf file).  Click "push".

3. Then reload the Sensor Agent so that it's using the new config. "reload" or 
"start" (if it's not running (yellow)).

The push may take some time, as I said. To see that something is happening, 
run "mysqladmin processlist" (as root) and check if there's some access 
to/from the snortcenter db.

Please use Mozilla with SnortCenter, since it's really picky.

Good luck!
	Michel

On Saturday 13 December 2003 20:34, Thierry wrote:
> Everything are running :
>
> 24386 root      17   0   912  912  716 R  2.0  1.0   0:06.38 top
>     1 root       8   0   484  444  424 S  0.0  0.5   0:04.08 init
>     2 root       9   0     0    0    0 S  0.0  0.0   0:00.00 keventd
>     3 root      19  19     0    0    0 S  0.0  0.0   0:02.00 ksoftirqd_CPU0
>     4 root       9   0     0    0    0 S  0.0  0.0   0:02.06 kswapd
>     5 root       9   0     0    0    0 S  0.0  0.0   0:00.00 bdflush
>     6 root       9   0     0    0    0 S  0.0  0.0   0:00.00 kupdated
>     7 root       9   0     0    0    0 S  0.0  0.0   0:00.00 jfsIO
>     8 root       9   0     0    0    0 S  0.0  0.0   0:00.00 jfsCommit
>     9 root       9   0     0    0    0 S  0.0  0.0   0:00.00 jfsSync
>    13 root      -1 -20     0    0    0 S  0.0  0.0   0:00.00 mdrecoveryd
>    16 root       9   0     0    0    0 S  0.0  0.0   0:03.77 kjournald
>   132 root       9   0   564  536  472 S  0.0  0.6   0:00.17 syslogd
>   135 root       9   0   432  368  368 S  0.0  0.4   0:00.05 klogd
>   137 root       9   0   456  392  392 S  0.0  0.4   0:00.00 inetd
>   140 root       9   0   740  636  636 S  0.0  0.7   0:00.01 sshd
>   150 root       8   0   524  520  472 S  0.0  0.6   0:00.01 crond
>   151 root       9   0   968  808  808 S  0.0  0.9   0:00.11 mysqld_safe
>   177 mysql      9   0 10348 2368 1616 S  0.0  2.5   0:01.34 mysqld
>   179 mysql      8   0 10348 2368 1616 S  0.0  2.5   0:00.61 mysqld
>   180 mysql      9   0 10348 2368 1616 S  0.0  2.5   0:00.00 mysqld
>   181 mysql      9   0 10348 2368 1616 S  0.0  2.5   0:00.00 mysqld
>   182 mysql      9   0 10348 2368 1616 S  0.0  2.5   0:00.01 mysqld
>   183 mysql      9   0 10348 2368 1616 S  0.0  2.5   0:00.00 mysqld
>   184 mysql      9   0 10348 2368 1616 S  0.0  2.5   0:00.00 mysqld
>   185 mysql      9   0 10348 2368 1616 S  0.0  2.5   0:00.30 mysqld
>   186 mysql      9   0 10348 2368 1616 S  0.0  2.5   0:00.02 mysqld
>   187 mysql      9   0 10348 2368 1616 S  0.0  2.5   0:03.15 mysqld
>   188 root       8   0  3088  844  832 S  0.0  0.9   0:00.75 httpd
>   192 root       9   0  1420  552  552 S  0.0  0.6   0:00.49 snmpd
>   194 nobody     9   0  6700 5424 2856 S  0.0  5.8   1:22.52 httpd
>   195 nobody     9   0  6304 5040 2948 S  0.0  5.4   1:21.17 httpd
>   196 nobody     9   0  6832 5592 2996 S  0.0  6.0   1:29.83 httpd
>   197 nobody     9   0  6844 5572 5172 S  0.0  6.0   1:26.00 httpd
>   198 nobody     9   0  6656 5384 4724 S  0.0  5.8   1:33.58 httpd
>   199 root       8   0  4512 1700 1380 S  0.0  1.8   0:02.43 miniserv.pl
>   203 nagios     9   0   756  716  644 S  0.0  0.8   0:00.42 nagios
>   236 root       9   0  1912  480  480 S  0.0  0.5   0:00.04 nessusd
>   239 root       9   0   468  412  412 S  0.0  0.4   0:00.02 agetty
>   240 root       9   0   468  412  412 S  0.0  0.4   0:00.01 agetty
>   241 root       9   0   468  412  412 S  0.0  0.4   0:00.01 agetty
>   242 root       9   0   468  412  412 S  0.0  0.4   0:00.00 agetty
>   243 root       9   0   468  412  412 S  0.0  0.4   0:00.01 agetty
>   244 root       9   0   468  412  412 S  0.0  0.4   0:00.01 agetty
>   245 root       9   0   468  412  412 S  0.0  0.4   0:00.01 agetty
>   246 root       9   0   468  412  412 S  0.0  0.4   0:00.00 agetty
>   250 nobody     9   0  6268 4980 2840 S  0.0  5.3   1:29.14 httpd
>   429 nobody     9   0  6988 5712 5496 S  0.0  6.1   0:53.33 httpd
>   433 nobody     9   0  6780 5600 5424 S  0.0  6.0   1:43.01 httpd
>   446 nobody     9   0  6560 5276 5204 S  0.0  5.6   1:57.74 httpd
>   935 nobody     9   0  7464 6284 6276 S  0.0  6.7   0:53.85 httpd
> 17143 root       9   0   888  692  692 S  0.0  0.7   0:00.10 sshd
> 17145 tst        9   0   868  684  684 S  0.0  0.7   0:00.57 sshd
> 17146 tst        9   0  1076  868  868 S  0.0  0.9   0:00.09 bash
> 17153 root       8   0  1060  852  852 S  0.0  0.9   0:00.15 bash
> 22554 root       9   0  1176 1048 1028 S  0.0  1.1   0:00.08 sshd
> 22556 tst        9   0  1112 1044  948 S  0.0  1.1   0:00.46 sshd
> 22557 tst        9   0  1076  980  864 S  0.0  1.0   0:00.02 bash
> 22564 root       9   0  1116 1116  904 S  0.0  1.2   0:00.20 bash