Honeypots mailing list archives

Re: Honeywall hwctl problem


From: "Earl Sammons" <esammons () hush com>
Date: Sun, 11 Dec 2005 19:20:45 -0800

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

If you run through the "menu" dialog that configures the entire
honeywall at once you _normally_ don't see problems with servoces
starting/stopping but If you load a fresh honeywall then attempt to
configure individual variables with 'hwctl' (which is perfectly
fine) you will likely see what you describe below...  Service
stoping starting and having problems.  If this is what your doing
my advice is to get all of your Vars set then reboot.  If its a
clean boot your probalby fine.

I'm guessing you were in a partially configured state when you were
issuing 'hwctl' commands and had the errors with things starting
and stopping.

I hate telling people to do this but its so much easier then trying
to troubleshoot something taht might not even be broken but...

Try rebooting the system.  If everything comes up (without error)
and everything is working properly then you should be good to go.
If you still get errors on boot (or otherwise) please let us know.

Earl

On Fri, 09 Dec 2005 11:23:49 -0800 nils.gedicke () post rwth-aachen de
wrote:
Th problem is as follows:

I am using hwctl to configure my honeywall with an externaly
generated honeywall.conf file. But during the startup process I
get
some FAILED messages when hwctl tries to start p0f and Snort.

What confuses me is, that hwctl seems to start some components for
a second time and then with different results.
I.e. hwctl starts Snort_inline for the first time with OK result,
then Snort with the
failure message. Later it starts both services again, but this
time
Snort_inline produces a Failure while Snort gives the OK. The same
goes for
p0f. It is called for a second time and gives OK then.

Nevertheless my honneywall seems to be running absolutely normal.
So
what are those Failures? Are they something which can be safely
ignored or is
something in the background going wrong wich isn't obvious in the
running
system?
-----BEGIN PGP SIGNATURE-----
Note: This signature can be verified at https://www.hushtools.com/verify
Version: Hush 2.4

wkYEARECAAYFAkOc61gACgkQk7+e+4lPSm3NIgCdHaJWYhYZpLeB9jEx/a0o2GGjxTMA
n0d8+GW+HoLv9Mbl8YL+oZejRfs8
=Ugd2
-----END PGP SIGNATURE-----



Current thread: