Re: OPENFPC Proxy merge

[Kevin Ross <kevross33 () googlemail com>]

Hi,

OK I have rebooted and I think it is worse. Machines are fully updated (64
bit Centos 6.4). Now when I request it comes back that no nodes returned
data; I go to the nodes and run a query for the PCAP direct on them using
the openfpc client and it just says there is a problem:  Problem processing
request: 0

PCAPs are running fine in captue and the openfpc -a status looks fine. I am
purely using this for PCAPs and not session capture. I am not really sure
what is wrong or how to begin troubleshooting it; is there any logs files I
might be missing?

Thanks,
Kevin



On 17 December 2013 20:32, Leon Ward <lward () sourcefire com> wrote:

> Trying to send again. I don't think the 1st try made it to the list...
>
>
> On 17 December 2013 12:09, Joel Esler (jesler) <jesler () cisco com> wrote:
>
> > Forwarded to the developer.
>
> Yeah, that would be me - although I'm fighting to find any time to look at
> it right now so it's becoming a little out of date. I've got a long todo
> list to work though. Are there any logs you could share to help work out
> what could be broken?
>
> I suggest you start up the openfpc daemon interactively with --debug and
> make the request again.
>
> -L
>
>
> > On Dec 17, 2013, at 11:25 AM, Kevin Ross <kevross33 () googlemail com>
> > wrote:
> >
> > > Hi,
> > >
> > > Running openfpc. Was working fine for months and months and now this
> > when I try and get a PCAP (nothing changed aside from maybe updates: unable
> > to proxy-merge
> > > Has anyone run into this (I am asking on this userlist as it was a
> > sourcefire employee made tool :)
> > > Thanks,
> > > Kevin
> > ------------------------------------------------------------------------------
> > > Rapidly troubleshoot problems before they affect your business. Most IT
> > > organizations don't have a clear picture of how application performance
> > > affects their revenue. With AppDynamics, you get 100% visibility into
> > your
> > > Java,.NET, & PHP application. Start your 15-day FREE TRIAL of
> > AppDynamics Pro!
> > >
> > http://pubads.g.doubleclick.net/gampad/clk?id=84349831&iu=/4140/ostg.clktrk_______________________________________________
> > > Snort-users mailing list
> > > Snort-users () lists sourceforge net
> > > Go to this URL to change user options or unsubscribe:
> > > https://lists.sourceforge.net/lists/listinfo/snort-users
> > > Snort-users list archive:
> > > http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
> > >
> > > Please visit http://blog.snort.org to stay current on all the latest
> > Snort news!
> >
> >
> >
> > ------------------------------------------------------------------------------
> > Rapidly troubleshoot problems before they affect your business. Most IT
> > organizations don't have a clear picture of how application performance
> > affects their revenue. With AppDynamics, you get 100% visibility into your
> > Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics
> > Pro!
> >
> > http://pubads.g.doubleclick.net/gampad/clk?id=84349831&iu=/4140/ostg.clktrk
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users () lists sourceforge net
> > Go to this URL to change user options or unsubscribe:
> > https://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
> > http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
> >
> > Please visit http://blog.snort.org to stay current on all the latest
> > Snort news!
------------------------------------------------------------------------------
Rapidly troubleshoot problems before they affect your business. Most IT 
organizations don't have a clear picture of how application performance 
affects their revenue. With AppDynamics, you get 100% visibility into your 
Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro!
http://pubads.g.doubleclick.net/gampad/clk?id=84349831&iu=/4140/ostg.clktrk

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!