Re: [psad-discuss] psad-1.2.4 - Exiting! at /usr/sbin/psad line 4034
Brought to you by:
mbr
From: Michael R. <mb...@ci...> - 2004-01-06 04:03:28
|
Hi Chuck - The error you are seeing must have been caused by the upgrade process of moving to psad-1.2.4. The 1.2.4 release definitely includes the DISK_CHECK_INTERVAL variable in the psad.conf file, so perhaps the old 1.2.3 config file is still in place even after the upgrade? I have attached the psad.conf file =66rom the 1.2.4 release to this email just in case. If you decide to use it, you will need to edit at least the HOSTNAME variable and probably the EMAIL_ADDRESSES variable as well. --Mike Michael Rash http://www.cipherdyne.org Key fingerprint =3D 53EA 13EA 472E 3771 894F AC69 95D8 5D6B A742 839F On Jan 05, 2004, Chuck Seiders wrote: > Greetings, >=20 > I'm running a debian(sarge) system > # uname -a > Linux boxer 2.4.23-ow1 #1 Thu Dec 4 23:30:08 EST 2003 i686 GNU/Linux > after apt-get upgrading from psad-1.2.3 to > Name Version Description > psad 1.2.4-1 The Port Scan > Attack Detector > this weekend I began seeing the following: > Starting Port Scan Attack Detector and associated daemons: ** The > config file "/etc/psad/psad.conf" does not contain the >=20 > variable: "DISK_CHECK_INTERVAL". Exiting! at /usr/sbin/psad line 4034 >=20 > invoke-rc.d: initscript psad, action "start" failed. >=20 > dpkg: error processing psad (--configure): >=20 > subprocess post-installation script returned error exit status 255 >=20 > Errors were encountered while processing: >=20 > psad >=20 > E: Sub-process /usr/bin/dpkg returned an error code (1) >=20 > Read this: > psad-1.2.4 (10/15/2003): > - Added danger level to subject line in email alerts. > - Removed diskmond altogether since psad now handles disk space > thresholds directly. This allows filehandles to be handled > properly. > - Added auto_block_ignore_ip() to prevent 0.0.0.0, 127.0.0.1, > and local interface ips from being included in auto blocking > routines. > - Added Bit::Vector module to stop installation warnings from > Date::Calc. > - Made get_local_ips() called periodically since local addresses > may change (dhcp, etc.). > - Added installation code and init script for Gentoo Linux. > - Bugfix for INIT_DIR in uninstall() routine in install.pl. > - Bugfix for auto-blocking loop after timeouts are hit. > - Added --status-dl [N] to display status information only for > those scans that reach at least [N]. >=20 > and wonder if " Removed diskmond altogether since psad now handles > disk space > thresholds directly. This allows filehandles to be handled > properly " is related to the trouble I'm experiencing ? >=20 > I also did # diff psad.conf psad.conf.dpkg-dist > and don't see any reference to DISK_CHECK_INTERVAL. > nor do I see it mentioned in the man page. >=20 > Help, pointers or suggestions ?? >=20 > ~~ > ~~~~ > Chuck Seiders >=20 >=20 >=20 > ________________________________________________________________________ > This email has been scanned for all viruses by the MessageLabs Email > Security System. For more information on a proactive email security > service working around the clock, around the globe, visit > http://www.messagelabs.com > ________________________________________________________________________ >=20 >=20 > ------------------------------------------------------- > This SF.net email is sponsored by: IBM Linux Tutorials. > Become an expert in LINUX or just sharpen your skills. Sign up for IBM's > Free Linux Tutorials. Learn everything from the bash shell to sys admin. > Click now! http://ads.osdn.com/?ad_id=3D1278&alloc_id=3D3371&op=3Dclick > _______________________________________________ > psad-discuss mailing list > psa...@li... > https://lists.sourceforge.net/lists/listinfo/psad-discuss |