t3chn0m4g3
commented
1 year ago Based on the info it seems that either multiple tries to join the Hive failed and ssh sessions were starting to hang. Please review your Sensor command it should run as netstat -tulpen, then this should reflect my assumption.
For further investigation please follow the discussion #1153.
I installed 2 servers (HIVE and HIVE SENSOR) from ISO image ftpot_amd64.iso. There were no problems during installation. But after running Distributed Deployment (deploy.sh) and rebooting - logs stop coming to Kibana and ELK. And following bugs have appeared in Cockpit (on HIVE server) –
What can I do to correct the errors?
⚠️ Basic support information (commands are expected to run as
root)What version of the OS are you currently using
lsb_release -aanduname -a? No LSB modules are available. Distributor ID: Debian Description: Debian GNU/Linux 11 (bullseye) Release: 11 Codename: bullseyeWhat T-Pot version are you currently using? -22.04
What edition (Standard, Nextgen, etc.) of T-Pot are you running?
HIVE and the HIVE_SENSOR
What architecture are you running on (i.e. hardware, cloud, VM, etc.)?
VM
Did you have any problems during the install? If yes, please attach
/install.log/install.err.How long has your installation been running?
1 day
Did you install upgrades, packages or use the update script?
No
Did you modify any scripts or configs? If yes, please attach the changes.
NO
Please provide a screenshot of
glancesandhtop.How much free disk space is available (
df -h)? df -h Filesystem Size Used Avail Use% Mounted on udev 7.8G 0 7.8G 0% /dev tmpfs 1.6G 1.7M 1.6G 1% /run /dev/sda2 118G 6.4G 106G 6% / tmpfs 7.8G 0 7.8G 0% /dev/shm tmpfs 5.0M 0 5.0M 0% /run/lock tmpfs 1.6G 0 1.6G 0% /run/user/1000What is the current container status (
Sensor
dps.sh)? HiveWhat is the status of the T-Pot service (
systemctl status tpot)?Hive
Sensor
What ports are being occupied? Stop T-Pot
systemctl stop tpotand runnetstat -tulpenSensor
-Hive
