StamusNetworks / SELKS

A Suricata based IDS/IPS/NSM distro
https://www.stamus-networks.com/open-source/#selks
GNU General Public License v3.0
1.46k stars 286 forks source link

Suricata Initialization Problem. #220

Open ServSlack opened 4 years ago

ServSlack commented 4 years ago

Hello guys,

I do my first SELKS installation using " SELKS-5.0-nodesktop.iso ", but when access web interface the status for Suricata always is red. The service is UP, but the status on web interface never change.

Reading a bit more I noticed that " /etc/suricata/selks5-interfaces-config.yaml " not was created during the installation process.

Can you help me to correct this problem or can someone sent me the default content of this file ?

/var/log/suricata/suricata-start.log

[533] 29/4/2020 -- 19:53:37 - (conf-yaml-loader.c:279) (ConfYamlParse) -- Configuration node 'detect' redefined. [533] 29/4/2020 -- 19:53:37 - (conf-yaml-loader.c:279) (ConfYamlParse) -- Configuration node 'default-log-dir' redefined. [533] 29/4/2020 -- 19:53:37 - (conf-yaml-loader.c:279) (ConfYamlParse) -- Configuration node 'stats' redefined. [533] 29/4/2020 -- 19:53:37 - (conf-yaml-loader.c:279) (ConfYamlParse) -- Configuration node 'outputs' redefined. [533] 29/4/2020 -- 19:53:37 - (conf-yaml-loader.c:279) (ConfYamlParse) -- Configuration node 'logging' redefined. [533] 29/4/2020 -- 19:53:37 - (conf-yaml-loader.c:279) (ConfYamlParse) -- Configuration node 'app-layer' redefined. [533] 29/4/2020 -- 19:53:37 - (conf-yaml-loader.c:279) (ConfYamlParse) -- Configuration node 'asn1-max-frames' redefined. [533] 29/4/2020 -- 19:53:37 - (conf-yaml-loader.c:255) (ConfYamlParse) -- Including configuration file /etc/suricata/selks5-interfaces-config.yaml. [533] 29/4/2020 -- 19:53:37 - (conf-yaml-loader.c:141) (ConfYamlHandleInclude) -- [ERRCODE: SC_ERR_FOPEN(44)] - Failed to open configuration include file /etc/suricata/selks5-interfaces-config.yaml: No such file or directory [533] 29/4/2020 -- 19:53:37 - (conf-yaml-loader.c:149) (ConfYamlHandleInclude) -- [ERRCODE: SC_ERR_CONF_YAML_ERROR(242)] - Failed to include configuration file /etc/suricata/selks5-addin.yaml

pevma commented 4 years ago

Did the first time set up finish ok - https://github.com/StamusNetworks/SELKS/wiki/First-time-setup ?