gamelinux/prads — Issue #11: Problems in sguil with startup options
Author: carlopmart
Created: 2011-11-13 20:28:09+00:00
State: open

If you use different startup options for prads, some appears when it is used with sguil. For example:

a) With these startup options, no events are registered in sguil server: "prads -c /data/config/etc/snort/prads.conf -f /nsm/sguil_sensor/ubuids01/prads/prads.fifo -UTtI -XFRMSAK -a 172.25.50.0/27 -i eth4 -Z"

b) With these startup options, events are registered in sguil server: "prads -c /data/config/etc/snort/prads.conf -f /nsm/sguil_sensor/ubuids01/prads/prads.fifo -i eth4"

prads.conf content:
daemon=1
asset_log=/nsm/sguil_sensor/ubuids01/prads/prads.log
pid_file=/var/run/prads.pid