Re: [Os-sim-support] OSSIM startup woes . . .

[Troy R. <roc...@hr...>]

Hmm, that's not it I don't think.  I removed the password and also removed
it from the file and get the same error message.  I think someone else
posted recently and had a different error message when they had the
password wrong . . .=20

On Tue, 13 Apr 2004, Fabio Ospitia Trujillo wrote:

> Hi
>=20
> If your DB not have password please delete the PASSWORD=3Dxxxxxxxx; label
> of the file.
>=20
> FOT.
>=20
>=20
> El jue, 01 de 04 de 2004 a las 01:27, Troy Rockwood escribi=C3=B3:
> > Thanks for the note about the php-domxml rpm, after installing that, I =
can
> > look at the directives.  I am still not getting alerts into OSSIM thoug=
h
> > and noticed this new problem.
> >=20
> > I went through the installation instructions again and changed the
> > /etc/ossim/server/config.xml to this:
> >=20
> > <?xml version=3D'1.0' encoding=3D'UTF-8' ?>
> >=20
> > <config>
> >         <log filename=3D"/tmp/ossim.log"/>
> >         <sensor name=3D"server" ip=3D"1.2.3.4" interface=3D"eth0"/>
> >         <datasources>
> >                 <datasource name=3D"ossimDB" provider=3D"MySQL" dsn=3D"=
PORT=3D3306;USER=3Droot;PASSWORD=3Dxxxxxxxx;DATABASE=3Dossim;HOST=3Dlocalho=
st"/>
> >                 <datasource name=3D"snortDB" provider=3D"MySQL" dsn=3D"=
PORT=3D3306;USER=3Droot;PASSWORD=3Dxxxxxxxx;DATABASE=3Dsnort;HOST=3Dlocalho=
st"/>
> >         </datasources>
> >         <directive filename=3D"/etc/ossim/server/directives.xml"/>
> >         <scheduler interval=3D"15"/>
> >         <server port=3D"40001"/>
> > </config>
> >=20
> > and when I try to start ossim, I get the following error message:
> >=20
> > (process:13827): GLib-GObject-CRITICAL **: file gobject.c: line 1337 (g=
_object_unref): assertion `G_IS_OBJECT (object)' failed
> >=20
> > as well as this in the /tmp/ossim.log file:
> >=20
> > file sim-container.c: line 380 (sim_container_db_get_recovery): asserti=
on `database !=3D NULL' failed
> >=20
> > repeated over and over again.
> >=20
> > the mysql database looks like this:
> > mysql> show databases;
> > +---------------+
> > | Database      |
> > +---------------+
> > | mysql         |
> > | ossim         |
> > | snort         |
> > | snort_archive |
> > | test          |
> > +---------------+
> > 5 rows in set (0.02 sec)
> >=20
> > mysql> use ossim;
> > Reading table information for completion of table and column names
> > You can turn off this feature to get a quicker startup with -A
> >=20
> > Database changed
> > mysql> show tables;
> > +---------------------------+
> > | Tables_in_ossim           |
> > +---------------------------+
> > | alert                     |
> > | backlog                   |
> > | category                  |
> > | classification            |
> > | conf                      |
> > | control_panel_host        |
> > | control_panel_net         |
> > | host                      |
> > | host_mac                  |
> > | host_netbios              |
> > | host_os                   |
> > | host_plugin_sid           |
> > | host_qualification        |
> > | host_scan                 |
> > | host_sensor_reference     |
> > | host_services             |
> > | host_vulnerability        |
> > | net                       |
> > | net_host_reference        |
> > | net_qualification         |
> > | net_sensor_reference      |
> > | net_vulnerability         |
> > | plugin                    |
> > | plugin_reference          |
> > | plugin_sid                |
> > | policy                    |
> > | policy_host_reference     |
> > | policy_net_reference      |
> > | policy_port_reference     |
> > | policy_sensor_reference   |
> > | policy_sig_reference      |
> > | policy_time               |
> > | port                      |
> > | port_group                |
> > | port_group_reference      |
> > | protocol                  |
> > | rrd_anomalies             |
> > | rrd_anomalies_global      |
> > | rrd_conf                  |
> > | rrd_conf_global           |
> > | scan                      |
> > | sensor                    |
> > | signature                 |
> > | signature_group           |
> > | signature_group_reference |
> > +---------------------------+
> > 45 rows in set (0.00 sec)
> >=20
> > mysql> use snort;
> > Reading table information for completion of table and column names
> > You can turn off this feature to get a quicker startup with -A
> >=20
> > Database changed
> > mysql> show tables;
> > +------------------+
> > | Tables_in_snort  |
> > +------------------+
> > | acid_ag          |
> > | acid_ag_alert    |
> > | acid_event       |
> > | acid_ip_cache    |
> > | data             |
> > | detail           |
> > | encoding         |
> > | event            |
> > | icmphdr          |
> > | iphdr            |
> > | opt              |
> > | ossim_event      |
> > | reference        |
> > | reference_system |
> > | schema           |
> > | sensor           |
> > | sig_class        |
> > | sig_reference    |
> > | signature        |
> > | tcphdr           |
> > | udphdr           |
> > +------------------+
> > 21 rows in set (0.01 sec)
> >=20
> > Any help would be appreciated!
> >=20
> > Troy Rockwood  | Security is mostly a supersition.
> > Research Staff | It does not exist in nature . . .
> > HRL Labs       | Life is either a daring adventure
> >                | or nothing. -- Helen Keller
> >=20
> >=20
> >=20
> >=20
> >=20
> >=20
> >=20
> > -------------------------------------------------------
> > This SF.Net email is sponsored by: IBM Linux Tutorials
> > Free Linux tutorial presented by Daniel Robbins, President and CEO of
> > GenToo technologies. Learn everything from fundamentals to system
> > administration.http://ads.osdn.com/?ad_id=3D1470&alloc_id=3D3638&op=3Dc=
lick
> > _______________________________________________
> > Os-sim-support mailing list
> > Os-...@li...
> > https://lists.sourceforge.net/lists/listinfo/os-sim-support
>=20
>=20
>=20