Thread: Re: [mod-security-users] Latest ModSec Console not working
Brought to you by:
victorhora,
zimmerletw
From: Dimitri Y. <dyi...@fi...> - 2008-04-28 12:22:12
|
Hi, Ivan. Well, this does seem a bit starnge. I installed the latest version of modsecurity console in /opt/modsecurity-console after moving the previous version to /opt/modsecurity-console-old. When I start the new version, I see the graphs, but they're not populateed with data. And, there are no alerts, etc. (well, I can create an admin event by provide the wrong login information). I created my sensor properly. If I stop the new version, and start the old and, voila, data on blocked attempts show up (thank you, thank you, thank you ModSecurity!). I've just installed version 1.0.4, and will see what happens. Dimitri Ivan Ristic wrote .. > I wouldn't know. Nothing was changed in that area. I've had > "intermittent" problems with graphs at various points, and I suspect > the graphing library. But there are no errors reported by it so I am > at loss to explain the issue. It's likely that we'll replace it with > something else. See my questions below: > > BTW, if you stop the console and delete the RRD files the graphs may restart. > > On Fri, Apr 25, 2008 at 5:34 PM, Dimitri Yioulos <dyi...@fi...> wrote: > > Hi, all. > > > > I recently installed ModSecurity Console 1.0.3 on my server running > > modsecurity-1.9.4. The graphs have no data in them. > > But all your other data (sensors, events, etc) is still there? > > > > If I run Console > > version 1.0.2 (I renamed the install directory before installing 1.0.3), > > though, I see data. What am I missing here? > > > > Thanks. > > > > Dimitri > > > > -- > > This message has been scanned for viruses and > > dangerous content by MailScanner, and is > > believed to be clean. > > > > > > ------------------------------------------------------------------------- > > This SF.net email is sponsored by the 2008 JavaOne(SM) Conference > > Don't miss this year's exciting event. There's still time to save $100. > > Use priority code J8TL2D2. > > http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone > > _______________________________________________ > > mod-security-users mailing list > > mod...@li... > > https://lists.sourceforge.net/lists/listinfo/mod-security-users > > > > > > -- > Ivan Ristic > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. |
From: Ivan R. <iva...@gm...> - 2008-04-28 12:42:50
|
That does not strange to me :) By moving the old directory someplace else you've also moved the data. What you essentially have is a brand new installation. If you want to keep the old data just unpack the new version of the old version (do make a copy of the files as backup, but do not move them). On Mon, Apr 28, 2008 at 1:21 PM, Dimitri Yioulos <dyi...@fi...> wrote: > Hi, Ivan. > > Well, this does seem a bit starnge. I installed the latest version of > modsecurity console in /opt/modsecurity-console after moving the previous > version to /opt/modsecurity-console-old. When I start the new version, I see > the graphs, but they're not populateed with data. And, there are no alerts, > etc. (well, I can create an admin event by provide the wrong login > information). I created my sensor properly. > > If I stop the new version, and start the old and, voila, data on blocked > attempts show up (thank you, thank you, thank you ModSecurity!). I've just > installed version 1.0.4, and will see what happens. > > Dimitri > > > Ivan Ristic wrote .. > > > > I wouldn't know. Nothing was changed in that area. I've had > > "intermittent" problems with graphs at various points, and I suspect > > the graphing library. But there are no errors reported by it so I am > > at loss to explain the issue. It's likely that we'll replace it with > > something else. See my questions below: > > > > BTW, if you stop the console and delete the RRD files the graphs may > restart. > > > > On Fri, Apr 25, 2008 at 5:34 PM, Dimitri Yioulos <dyi...@fi...> > wrote: > > > Hi, all. > > > > > > I recently installed ModSecurity Console 1.0.3 on my server running > > > modsecurity-1.9.4. The graphs have no data in them. > > > > But all your other data (sensors, events, etc) is still there? > > > > > > > If I run Console > > > version 1.0.2 (I renamed the install directory before installing 1.0.3), > > > though, I see data. What am I missing here? > > > > > > Thanks. > > > > > > Dimitri > > > > > > -- > > > This message has been scanned for viruses and > > > dangerous content by MailScanner, and is > > > believed to be clean. > > > > > > > > > ------------------------------------------------------------------------- > > > This SF.net email is sponsored by the 2008 JavaOne(SM) Conference > > > Don't miss this year's exciting event. There's still time to save $100. > > > Use priority code J8TL2D2. > > > > http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone > > > _______________________________________________ > > > mod-security-users mailing list > > > mod...@li... > > > https://lists.sourceforge.net/lists/listinfo/mod-security-users > > > > > > > > > > > -- > > Ivan Ristic > > > > -- > > > > This message has been scanned for viruses and > > dangerous content by MailScanner, and is > > believed to be clean. > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > > ------------------------------------------------------------------------- > This SF.net email is sponsored by the 2008 JavaOne(SM) Conference > Don't miss this year's exciting event. There's still time to save $100. > Use priority code J8TL2D2. > http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone > _______________________________________________ > mod-security-users mailing list > mod...@li... > https://lists.sourceforge.net/lists/listinfo/mod-security-users > -- Ivan Ristic |
From: Dimitri Y. <dyi...@fi...> - 2008-04-28 13:32:13
|
Understood. But, The old version picked up new alerts that the new version should also have picked up, but apparently didn't. They should both be reading from the same modsecurity-generated (or perhaps, better put, modsecurity-tracked) data, no? So, if I installed console 1.0.2 six months ago, and console 1.0.3 three days ago, wouldn't both versions report events that occurred this morning? On Monday 28 April 2008 8:42 am, you wrote: > That does not strange to me :) By moving the old directory someplace > else you've also moved the data. What you essentially have is a brand > new installation. If you want to keep the old data just unpack the new > version of the old version (do make a copy of the files as backup, but > do not move them). > > On Mon, Apr 28, 2008 at 1:21 PM, Dimitri Yioulos <dyi...@fi...> wrote: > > Hi, Ivan. > > > > Well, this does seem a bit starnge. I installed the latest version of > > modsecurity console in /opt/modsecurity-console after moving the > > previous version to /opt/modsecurity-console-old. When I start the new > > version, I see the graphs, but they're not populateed with data. And, > > there are no alerts, etc. (well, I can create an admin event by provide > > the wrong login information). I created my sensor properly. > > > > If I stop the new version, and start the old and, voila, data on blocked > > attempts show up (thank you, thank you, thank you ModSecurity!). I've > > just installed version 1.0.4, and will see what happens. > > > > Dimitri > > > > > > Ivan Ristic wrote .. > > > > > I wouldn't know. Nothing was changed in that area. I've had > > > > > > "intermittent" problems with graphs at various points, and I suspect > > > the graphing library. But there are no errors reported by it so I am > > > at loss to explain the issue. It's likely that we'll replace it with > > > something else. See my questions below: > > > > > > BTW, if you stop the console and delete the RRD files the graphs may > > > > restart. > > > > > On Fri, Apr 25, 2008 at 5:34 PM, Dimitri Yioulos > > > <dyi...@fi...> > > > > wrote: > > > > Hi, all. > > > > > > > > I recently installed ModSecurity Console 1.0.3 on my server running > > > > modsecurity-1.9.4. The graphs have no data in them. > > > > > > But all your other data (sensors, events, etc) is still there? > > > > > > > If I run Console > > > > version 1.0.2 (I renamed the install directory before installing > > > > 1.0.3), though, I see data. What am I missing here? > > > > > > > > Thanks. > > > > > > > > Dimitri > > > > > > > > -- > > > > This message has been scanned for viruses and > > > > dangerous content by MailScanner, and is > > > > believed to be clean. > > > > > > > > > > > > > > > > -------------------------------------------------------------------- > > > >----- This SF.net email is sponsored by the 2008 JavaOne(SM) > > > > Conference Don't miss this year's exciting event. There's still time > > > > to save $100. Use priority code J8TL2D2. > > > > > > > > > http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com > > >/javaone > > > > > > > _______________________________________________ > > > > mod-security-users mailing list > > > > mod...@li... > > > > https://lists.sourceforge.net/lists/listinfo/mod-security-users > > > > > > -- > > > Ivan Ristic > > > > > > -- > > > > > > This message has been scanned for viruses and > > > > > > dangerous content by MailScanner, and is > > > believed to be clean. > > > > -- > > This message has been scanned for viruses and > > dangerous content by MailScanner, and is > > believed to be clean. > > > > > > > > ------------------------------------------------------------------------- > > This SF.net email is sponsored by the 2008 JavaOne(SM) Conference Don't > > miss this year's exciting event. There's still time to save $100. Use > > priority code J8TL2D2. > > > > http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/ja > >vaone _______________________________________________ > > mod-security-users mailing list > > mod...@li... > > https://lists.sourceforge.net/lists/listinfo/mod-security-users > > -- > Ivan Ristic -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. |