<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Tahoma
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>
Thx<br><br>The delayed_job process is running, but by lunching the script I have an error regarding java : <br><br><i><font style="font-size: 8pt;" size="1">NOTE: Gem.source_index is deprecated, use Specification. It will be removed on or after 2011-11-01.</font><font style="font-size: 8pt;" size="1"><br></font><font style="font-size: 8pt;" size="1">Gem.source_index called from /usr/local/lib/ruby/gems/1.9.1/gems/bundler-1.0.10/lib/bundler/shared_helpers.rb:3.</font><font style="font-size: 8pt;" size="1"><br></font><font style="font-size: 8pt;" size="1">NOTE: Gem.source_index is deprecated, use Specification. It will be removed on or after 2011-11-01.</font><font style="font-size: 8pt;" size="1"><br></font><font style="font-size: 8pt;" size="1">Gem.source_index called from /usr/local/lib/ruby/gems/1.9.1/gems/bundler-1.0.10/lib/bundler/source.rb:162.</font><font style="font-size: 8pt;" size="1"><br></font><font style="font-size: 8pt;" size="1">NOTE: Gem::SourceIndex#each is deprecated with no replacement. It will be removed on or after 2011-11-01.</font><font style="font-size: 8pt;" size="1"><br></font><font style="font-size: 8pt;" size="1">Gem::SourceIndex#each called from /usr/local/lib/ruby/gems/1.9.1/gems/bundler-1.0.10/lib/bundler/source.rb:162.</font><font style="font-size: 8pt;" size="1"><br></font><font style="font-size: 8pt;" size="1">NOTE: Gem.source_index is deprecated, use Specification. It will be removed on or after 2011-11-01.</font><font style="font-size: 8pt;" size="1"><br></font><font style="font-size: 8pt;" size="1">Gem.source_index called from /usr/local/lib/ruby/gems/1.9.1/gems/bundler-1.0.10/lib/bundler/shared_helpers.rb:84.</font><font style="font-size: 8pt;" size="1"><br></font><font style="font-size: 8pt;" size="1">Jammit Warning: Asset compression disabled -- Java unavailable.</font><font style="font-size: 8pt;" size="1"><br></font><font style="font-size: 8pt;" size="1">DataObjects::URI.new with arguments is deprecated, use a Hash of URI components (/var/www/snorby/vendor/cache/ruby/1.9.1/gems/dm-do-adapter-1.1.0/lib/dm-do-adapter/adapter.rb:231:in `new')</font><font style="font-size: 8pt;" size="1"><br></font><font style="font-size: 8pt;" size="1">ERROR: there is already one or more instance(s) of the program running</font><font style="font-size: 8pt;" size="1"><br></font></i><br>If the problem is that I don't have any Java installed, why was everything working before ?<br><br>Thx again.<br><br><div><div id="SkyDrivePlaceholder"></div>> From: shirkdog@gmail.com<br>> Date: Tue, 3 Jan 2012 08:28:06 -0500<br>> Subject: Re: [Oisf-users] Suricata / Snorby Events errors<br>> To: victor@inliniac.net<br>> CC: amrith@hotmail.fr; oisf-users@openinfosecfoundation.org<br>> <br>> This should not be a problem in the latest Snorby, but for earlier<br>> versions I made a cronjob check for whether the delayed job was<br>> running and started it. The following was the script I called from the<br>> cronjob every */5 minutes. The ruby script required to be run in the<br>> Snorby directory (change that to wherever you installed it).<br>> <br>> #!/bin/sh<br>> <br>> #Local fixes for Snorby with Apache<br>> #<br>> TEST=`ps aux|grep delayed_job`;<br>> <br>> if [ ! $TEST ];<br>> then<br>> cd /usr/local/www/Snorby;<br>> /usr/local/bin/ruby script/delayed_job start;<br>> fi<br>> <br>> ---<br>> Shirkdog<br>> Free your Mind...<br>> http://www.shirkdog.us<br>> <br>> <br>> <br>> On Tue, Jan 3, 2012 at 6:47 AM, Victor Julien <victor@inliniac.net> wrote:<br>> > Can you check if it is still running? Or restart it to see if that makes<br>> > the events flow again?<br>> ><br>> > On 01/03/2012 12:41 PM, Amrith Z wrote:<br>> >><br>> >> Hi,<br>> >><br>> >> Yes, barnyard2 is also running. But maybe not the way it has to ?<br>> >><br>> >> Thx<br>> >><br>> >>> Date: Tue, 3 Jan 2012 12:38:58 +0100<br>> >>> From: victor@inliniac.net<br>> >>> To: oisf-users@openinfosecfoundation.org<br>> >>> Subject: Re: [Oisf-users] Suricata / Snorby Events errors<br>> >>><br>> >>> On 01/03/2012 12:14 PM, Amrith Z wrote:<br>> >>>><br>> >>>> Hi All,<br>> >>>><br>> >>>> I'm running Suricata with Snorby. The problem I have has already happened to me several times, and might come from Snorby, and not Suricata. What is happening is that by running Suricata, I do not see any alerts in the Events list of Snorby anymore.<br>> >>>> I see an alert in Snorby in the "Worker & Job Queue" section saying "Warning : the sensor cache job is not running". Nothing seems to change when I restart it with the interface. I found the /etc/init.d/worker script, but it doesn't work.<br>> >>>><br>> >>>> Any ideas ?<br>> >>><br>> >>> I assume you have barnyard2 running as well in this setup. Can you check<br>> >>> if it is still running? Or restart it to see if that makes the events<br>> >>> flow again?<br>> >>><br>> >>> --<br>> >>> ---------------------------------------------<br>> >>> Victor Julien<br>> >>> http://www.inliniac.net/<br>> >>> PGP: http://www.inliniac.net/victorjulien.asc<br>> >>> ---------------------------------------------<br>> >>><br>> >>> _______________________________________________<br>> >>> Oisf-users mailing list<br>> >>> Oisf-users@openinfosecfoundation.org<br>> >>> http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users<br>> >><br>> ><br>> ><br>> > --<br>> > ---------------------------------------------<br>> > Victor Julien<br>> > http://www.inliniac.net/<br>> > PGP: http://www.inliniac.net/victorjulien.asc<br>> > ---------------------------------------------<br>> ><br>> > _______________________________________________<br>> > Oisf-users mailing list<br>> > Oisf-users@openinfosecfoundation.org<br>> > http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users<br></div> </div></body>
</html>