search

ysrc / yulong-hids-archived

[archived] 一款实验性质的主机入侵检测系统
Other
2.16k stars 581 forks source link

Agent无法启动, 提示信息: exit status 127 #43

Open aRe00t opened 6 years ago

aRe00t commented 6 years ago

在一台 CentOS 5.4 的机器上成功安装后服务没起来, 手动启动时发现如下提示:

./daemon -netloc xxxx:443
2018/05/15 13:52:35 Start Agent
2018/05/15 13:52:35 Start Agent successful
2018/05/15 13:52:35 Agent to exit： exit status 127
2018/05/15 13:52:35 Start the task listener thread
2018/05/15 13:52:45 Start Agent
2018/05/15 13:52:45 Start Agent successful
2018/05/15 13:52:45 Agent to exit： exit status 127
lsb_release -a
LSB Version:    :core-3.1-amd64:core-3.1-ia32:core-3.1-noarch:graphics-3.1-amd64:graphics-3.1-ia32:graphics-3.1-noarch
Distributor ID: CentOS
Description:    CentOS release 5.4 (Final)
Release:    5.4
Codename:   Final
uname -r                                                                                                                                                                                                                                                              
2.6.18-164.el5
ihacku commented 6 years ago

agent webip debug 看下输出

aRe00t commented 6 years ago 
./agent: error while loading shared libraries: libpcap.so.1: cannot open shared object file: No such file or directory
neargle commented 6 years ago

需要安装一下 libpcap @ihacku 这个release是在什么系统下编译的呀？

aRe00t commented 6 years ago

多谢, 我看这个机器有 libpcap.so.0, 我装个1试试

imp0wd3r commented 6 years ago

@neargle @ihacku ubuntu16.04下agent启动时候也会出现这个问题，我的解决办法是建立一个软链接到libpcap.so.1

cd /usr/lib
sudo ln -s /usr/lib/x86_64-linux-gnu/libpcap.so.1.7.4 libpcap.so.1