1 |
Hello, |
2 |
|
3 |
When I start prelude-manager, I get the following message: |
4 |
|
5 |
bash-2.05b# prelude-manager |
6 |
- Initialized 3 reporting plugins. |
7 |
- Initialized 1 database plugins. |
8 |
- Subscribing Prelude NIDS data decoder to active decoding plugins. |
9 |
- Initialized 1 decoding plugins. |
10 |
- Initialized 0 filtering plugins. |
11 |
- Subscribing TextMod to active reporting plugins. |
12 |
- Subscribing XmlMod to active reporting plugins. |
13 |
- Subscribing MySQL to active database plugins. |
14 |
- sensors server started (listening on 127.0.0.1:5554). |
15 |
|
16 |
Then I start prelude-lml: |
17 |
|
18 |
bash-2.05b# prelude-lml |
19 |
- Initialized 3 logs plugins. |
20 |
- SimpleMod plugin added 211 rules. |
21 |
- Added monitor for '/var/log/messages'. |
22 |
- Subscribing plugin SimpleMod |
23 |
- Connecting to Unix prelude Manager server. |
24 |
- Plaintext authentication succeed with Prelude Manager. |
25 |
- Subscribing plugin Paxmod |
26 |
- Subscribing plugin SimpleMod |
27 |
file-server.c:initialize_fam:788 : (errno=Connection refused) : error initializing FAM: (null). |
28 |
- /var/log/messages: Metadata available, starting log analyzis at offset 5017909. |
29 |
|
30 |
When I look back in the console, where I started prelude-manger, I see it got killed: |
31 |
|
32 |
bash-2.05b# prelude-manager |
33 |
- Initialized 3 reporting plugins. |
34 |
- Initialized 1 database plugins. |
35 |
- Subscribing Prelude NIDS data decoder to active decoding plugins. |
36 |
- Initialized 1 decoding plugins. |
37 |
- Initialized 0 filtering plugins. |
38 |
- Subscribing TextMod to active reporting plugins. |
39 |
- Subscribing XmlMod to active reporting plugins. |
40 |
- Subscribing MySQL to active database plugins. |
41 |
- sensors server started (listening on 127.0.0.1:5554). |
42 |
[unix] - accepted connection. |
43 |
[unix] - plaintext authentication succeed. |
44 |
[unix] - sensor declared ident 578270586701940232. |
45 |
Killed |
46 |
bash-2.05b# |
47 |
|
48 |
Does anybody know how I could proceed to find out where the problem lies? |
49 |
|
50 |
My setup is the following: |
51 |
gentoo-stable, with |
52 |
* app-admin/prelude-lml [ Masked ] |
53 |
Latest version installed: 0.8.3-r1 |
54 |
* app-admin/prelude-manager [ Masked ] |
55 |
Latest version installed: 0.8.7 |
56 |
* dev-libs/libprelude [ Masked ] |
57 |
Latest version installed: 0.8.5-r1 |
58 |
* net-analyzer/prelude-nids [ Masked ] |
59 |
Latest version installed: 0.8.1-r1 |
60 |
|
61 |
Best regards, |
62 |
Daniel Struck |
63 |
|
64 |
|
65 |
|
66 |
-- |
67 |
gentoo-hardened@g.o mailing list |