[Sguil-users] [Sguil-Users] Barnyard failing to start
Status: Beta
Brought to you by:
bamm
From: James D. <jdi...@gm...> - 2011-01-08 19:40:54
|
Hello All, This is my first attempt at trying out Sguil, so the probability of user error on my part is quite high. After fixing some self inflicted misconfiguration's I'm getting this when I start everything up (note that sguild, sensor, and database are all on the same FreeBSD box). Nov 21 10:59:51 Cauldron SGUILD: Sguild Initialized. Nov 21 11:00:03 Cauldron barnyard2[1291]: sguil: Connected to localhost on 7735. Nov 21 11:00:03 Cauldron SGUILD: Sensor agent connect from 127.0.0.1:34638sock13 Nov 21 11:00:03 Cauldron SGUILD: Validating sensor access: 127.0.0.1 : Nov 21 11:00:03 Cauldron SGUILD: Valid sensor agent: 127.0.0.1 Nov 21 11:00:03 Cauldron barnyard2[1291]: FATAL ERROR: sguil: Expected SidCidResponse and got 'SGUIL-0.7.0 OPENSSL ENABLED^M ' Nov 21 11:00:03 Cauldron SGUILD: Ignoring cmd from unregistered agent: SidCidRequest Cauldron Nov 21 11:00:03 Cauldron SGUILD: Ignoring cmd from unregistered agent: It seems Sguild doesn't want to talk to barnyard, what can I do to convince it otherwise? Thanks in advance for any help with this matter. Regards, James Dickenson |