upgraded from 1.8.1 and have upload error - IDS Policy Manager v2 Usage

Forum IDS Policy Mana... IDS Policy Mana... upgraded from 1.8.1 and have upload error

2/19/2008 4:48 PM

	wayne
1 posts

upgraded from 1.8.1 and have upload error

I have been using version 1.8.1 with two remote sensors for the last few years with no problems

i went a head yesterday and downloaded the new version. It seems i have everything working ok prior to updating the remote sensor. the following error is what im getting

this worked prior to the upgrade.

is it a security issue?

i went ahead and move the rules folder out of c:\ids\snort-i and it did not even create the rules folder

thanks

Policy Log
----------

Gathering Information: Started
Gathering Information: Complete
Build Policy from Database: Started
Build Policy from Database: Complete

Upload Log
----------

Connect to Sensor: Started
Connect to Sensor: Complete
Uploading to Sensor Interent using sftp.

Local file: C:\Documents and Settings\xxxx\Application Data\Activeworx\IDS Policy Manager SA\tmp\PID3\154
Error Creating to Directory : C:\IDS\snort-I\rules - Directory Could already be made
Setting Remote Path: C:\IDS\snort-I\rules
Set Remote Path: C:\IDS\snort-I\rules
RemoteFile: bad-traffic.rules
Error Uploading File: C:\\Documents and Settings\\xxxx\\Application Data\\Activeworx\\IDS Policy Manager SA\\tmp\\PID3\\154 - Server error (2): No such file
Error Uploading to Sensor : Error Uploading File: Server error (2): No such file

Restart Log
-----------

2/19/2008 8:42 PM

	Jeff Dell
228 posts
www.activeworx.com

Re: upgraded from 1.8.1 and have upload error

I would also check to make sure the path is correct of the remote machine. Can you really ssh into the box and change to c:\ids\snort-I\rules?

Cheers,

Jeff

3/13/2008 10:14 PM

	paulr
21 posts

Re: upgraded from 1.8.1 and have upload error

I'm getting the same error all the sudden. It was working fine before and as far as I know I haven't changed anything on the sensor. I can SSH to it just fine. I still have another sensor that I can upload to and no error --so I don't know what the deal is. However, the one I can upload to I may not have sent the last few policy changes to.

Same error I think:

Policy Log
----------

Gathering Information: Started
Gathering Information: Complete
Build Policy from Database: Started
Build Policy from Database: Complete

Upload Log
----------

Connect to Sensor: Started
Connect to Sensor: Complete
Uploading to Sensor P-IDS using sftp.

Local file: C:\Documents and Settings\xxxxx\Application Data\Activeworx\IDS Policy Manager SA\tmp\PID3\100
Error Creating to Directory : /etc/snort-2.8/rules - Directory Could already be made
Setting Remote Path: /etc/snort-2.8/rules
Set Remote Path: /etc/snort-2.8/rules
RemoteFile: scan.rules
Error Uploading File: C:\\Documents and Settings\\xxxxx\\Application Data\\Activeworx\\IDS Policy Manager SA\\tmp\\PID3\\100 - Server error (4): Failure
Error Uploading to Sensor : Error Uploading File: Server error (4): Failure

Restart Log
-----------

Any ideas? I need to update a policy...thanks!

3/14/2008 2:08 AM

	paulr
21 posts

Re: upgraded from 1.8.1 and have upload error

Hahahaha. Now that is funny.

I was working on the box just fine and my existing tunneled x sessions were working even if I logged out and back in. However, x stopped tunneling for root no matter how I logged in or changed to root.

So...for whatever reason I did an ldconfig and it came back that the device was full.

I had the server group build the base OS and it ended up with an 11Gb root and a very large home...

VAR had filled the root. :-|

I deleted a few items and amazingly the policy uploaded.

If everything else looks good, make sure Snort hasn't taken all your disk space on the root (if you have a similar setup). I think mine reverts to local logging if the remote MySQL is down --and I was working on the database so that may have been what happened.

Page 1 of 1

Forum

IDS Policy Mana...

upgraded from 1.8.1 and have upload error