SYSTEM WARNING: 'date_default_timezone_get(): It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected the timezone 'UTC' for now, but please set date.timezone to select your timezone.' in '/usr/share/mantis/www/core.php' line 264

0003303: SNORT on but OFF in Dashboard. - MantisBT
MantisBT - Endian Firewall
View Issue Details
0003303Endian FirewallIntrusion Preventionpublic2010-11-17 10:022011-10-31 11:27
ardit-endian 
simon-endian 
normalminoralways
confirmedopen 
2.3.1 
 
0003303: SNORT on but OFF in Dashboard.
SNORT is running but on dashboard Snort continues to appear OFF.

ps aux | grep snort
root 14690 0.0 3.2 32932 16912 ? Ss 10:57 0:00 /usr/sbin/snort -N -d -D -Q -u snort -g snort -c /etc/snort/snort.conf -l /var/log/snort -m 022


Regards.
purple
Issue History
2010-11-17 10:02ardit-endianNew Issue
2010-11-17 10:04luca-endianTag Attached: purple
2010-11-17 10:06lorenzo-endianNote Added: 0005146
2010-11-17 10:06lorenzo-endianAssigned To => lorenzo-endian
2010-11-17 10:06lorenzo-endianStatusnew => acknowledged
2010-11-17 10:52ardit-endianNote Added: 0005148
2010-11-17 11:48lorenzo-endianNote Added: 0005152
2010-11-17 11:48lorenzo-endianAssigned Tolorenzo-endian => simon-endian
2010-11-17 11:48lorenzo-endianStatusacknowledged => confirmed
2010-11-17 15:49ardit-endianNote Added: 0005154
2010-11-24 13:44ardit-endianNote Added: 0005193
2010-11-24 13:46lorenzo-endianNote Added: 0005194
2011-01-20 09:26ra-endianCustomer Occurencies => 0
2011-01-20 11:03ardit-endianCustomer Occurencies0 => 2-3
2011-01-21 11:03ardit-endianCustomer Occurencies2-3 => 4-6
2011-02-14 08:59ra-endianSeverityminor => major
2011-02-18 13:49ra-endianSeveritymajor => minor
2011-06-03 09:29ardit-endianNote Added: 0006564
2011-10-31 11:27thomas-endianNote Added: 0007524

Notes
(0005146)
lorenzo-endian   
2010-11-17 10:06   
Hi ardit,

two quick questions:

- is your system running with the last updates installed?
- if you click on dashboard another time, does snort appear ON?
- can you wait 2 minutes and then try to check it another time?

These questions are useful to understand where is the problem.

Thanks in advance for your support

Lo
(0005148)
ardit-endian   
2010-11-17 10:52   
hi Lo,

- is your system running with the last updates installed?
Yes
about question 2 and 3, when I logged in again, I saw snort ON on the dashboard,(strange but true).

Thank you for the follow up.

regards,
ardit.
(0005152)
lorenzo-endian   
2010-11-17 11:48   
Hi ardit,

for sure this is not the best; we will improve the messages and their reactivity on the dashboard!

Thanks for sharing this problem and for the feedback!

Lo

ps: I realized now that the questions was 3, not 2! hahaha! :-)
(0005154)
ardit-endian   
2010-11-17 15:49   
Thanks :)
(0005193)
ardit-endian   
2010-11-24 13:44   
Hi lo,

issue confirmed with 2.4 enterprise as well.
(0005194)
lorenzo-endian   
2010-11-24 13:46   
Hi ardit,

Thanks for the feedback!

Lo
(0006564)
ardit-endian   
2011-06-03 09:29   
happened again.

2.4 full up to date.
(0007524)
thomas-endian   
2011-10-31 11:27   
also in germany - 2.4 ARM up to date.