IMspector 0.8



  • just went to upgrade imspector 0.7 to 0.8 and service won't start anymore. I think the problem is sqlite and mysql-client versions are too old. Also today I installed Snort (maybe that broke something).
    How to fix this? Can I portupgrade down, back to v0.7?
    Anyone help me!!
    I have pfsense v1.2.2

    Also got this error when trying to start from prompt #
    /libexec/ld-elf.so.1: Shared object "libimspector.so" not found, required by "imspector"

    cat pkg_mgr_imspector.log

    Removing imspector package… require_once('include_file')
    require_once('include_file') included
    Beginning package installation.
    Downloading package configuration file...
    pkg-config-0.23_1
    sqlite3-3.6.10 Array
    (
        [0] => Requested space: 928 bytes, free space: 17365915648 bytes in /var/tmp/instmp.MOgbe6
        [1] => tar: Unrecognized archive format: Inappropriate file type or format
        [2] => tar: Error exit delayed from previous errors.
        [3] => pkg_add: tar extract of /tmp/apkg_sqlite3-3.6.10.tbz failed!
        [4] => pkg_add: unable to extract table of contents file from '/tmp/apkg_sqlite3-3.6.10.tbz' - not a package?
        [5] => pkg_add: 1 package addition(s) failed
    )

    mysql-client-5.0.77 Array
    (
        [0] => Requested space: 948 bytes, free space: 17365913600 bytes in /var/tmp/instmp.cDn90R
        [1] => tar: Unrecognized archive format: Inappropriate file type or format
        [2] => tar: Error exit delayed from previous errors.
        [3] => pkg_add: tar extract of /tmp/apkg_mysql-client-5.0.77.tbz failed!
        [4] => pkg_add: unable to extract table of contents file from '/tmp/apkg_mysql-client-5.0.77.tbz' - not a package?
        [5] => pkg_add: 1 package addition(s) failed
    )

    imspector-0.8 Array
    (
        [0] => Requested space: 631180 bytes, free space: 17365913600 bytes in /var/tmp/instmp.EpxdMt
        [1] => pkg_add: warning: package 'imspector-0.8' requires 'sqlite3-3.6.10', but 'sqlite3-3.5.6' is installed
        [2] => pkg_add: warning: package 'imspector-0.8' requires 'mysql-client-5.0.77', but 'mysql-client-5.0.51a' is installed
        [3] => Package 'imspector-0.8' depends on 'pkg-config-0.23_1' with 'devel/pkg-config' origin.
        [4] =>  - already installed.
        [5] => Package 'imspector-0.8' depends on 'sqlite3-3.6.10' with 'databases/sqlite3' origin.
        [6] =>  - already installed.
        [7] => Package 'imspector-0.8' depends on 'mysql-client-5.0.77' with 'databases/mysql50-client' origin.
        [8] =>  - already installed.
        [9] => extract: Package name is imspector-0.8
        [10] => extract: CWD to /usr/local
        [11] => extract: /usr/local/etc/imspector/acl.txt.sample
        [12] => extract: execute 'if [ ! -f /usr/local/etc/imspector/acl.txt ] ; then cp -p /usr/local/etc/imspector/acl.txt.sample /usr/local/etc/imspector/acl.txt; fi'
        [13] => extract: /usr/local/etc/imspector/badwords.txt.sample
        [14] => extract: execute 'if [ ! -f /usr/local/etc/imspector/badwords.txt ] ; then cp -p /usr/local/etc/imspector/badwords.txt.sample /usr/local/etc/imspector/badwords.txt; fi'
        [15] => extract: /usr/local/etc/imspector/imspector.conf.sample
        [16] => extract: execute 'if [ ! -f /usr/local/etc/imspector/imspector.conf ] ; then cp -p /usr/local/etc/imspector/imspector.conf.sample /usr/local/etc/imspector/imspector.conf; fi'
        [17] => extract: /usr/local/lib/imspector/aclfilterplugin.so
        [18] => extract: /usr/local/lib/imspector/badwordsfilterplugin.so
        [19] => extract: /usr/local/lib/imspector/catsloggingplugin.so
        [20] => extract: /usr/local/lib/imspector/censordfilterplugin.so
        [21] => extract: /usr/local/lib/imspector/dbfilterplugin.so
        [22] => extract: /usr/local/lib/imspector/dbresponderplugin.so
        [23] => extract: /usr/local/lib/imspector/debugloggingplugin.so
        [24] => extract: /usr/local/lib/imspector/fileloggingplugin.so
        [25] => extract: /usr/local/lib/imspector/ggprotocolplugin.so
        [26] => extract: /usr/local/lib/imspector/httpsprotocolplugin.so
        [27] => extract: /usr/local/lib/imspector/icqprotocolplugin.so
        [28] => extract: /usr/local/lib/imspector/ircprotocolplugin.so
        [29] => extract: /usr/local/lib/imspector/jabberprotocolplugin.so
        [30] => extract: /usr/local/lib/imspector/miscfilterplugin.so
        [31] => extract: /usr/local/lib/imspector/msnprotocolplugin.so
        [32] => extract: /usr/local/lib/imspector/mysqlloggingplugin.so
        [33] => extract: /usr/local/lib/imspector/sqliteloggingplugin.so
        [34] => extract: /usr/local/lib/imspector/yahooprotocolplugin.so
        [35] => extract: /usr/local/sbin/imspector
        [36] => extract: CWD to /usr/local
        [37] => extract: /usr/local/etc/rc.d/imspector
        [38] => extract: CWD to .
        [39] => Running mtree for imspector-0.8..
        [40] => mtree -U -f +MTREE_DIRS -d -e -p /usr/local >/dev/null
        [41] => Attempting to record package into /var/db/pkg/imspector-0.8..
        [42] => Trying to record dependency on package 'pkg-config-0.23_1' with 'devel/pkg-config' origin.
        [43] => Trying to record dependency on package 'sqlite3-3.6.10' with 'databases/sqlite3' origin.
        [44] => Trying to record dependency on package 'mysql-client-5.0.77' with 'databases/mysql50-client' origin.
        [45] => Package imspector-0.8 registered in /var/db/pkg/imspector-0.8
    )

    pkg_add successfully completed.
    pkg_add successfully completed.
    pkg_add successfully completed.
    pkg_add successfully completed.
    Changing file mode to 0755 for /usr/local/pkg/imspector.inc
    Changing file mode to 0755 for /usr/local/www/services_imspector_logs.php
    require_once('include_file')



  • @mohman:

    just went to upgrade imspector 0.7 to 0.8 and service won't start anymore. I think the problem is sqlite and mysql-client versions are too old. Also today I installed Snort (maybe that broke something).
    How to fix this? Can I portupgrade down, back to v0.7?
    Anyone help me!!
    I have pfsense v1.2.2

    I have pretty much same situation. I have however NOT snort installed.
    I don't know if there are problems with sqlite, I do not use thoese features in IMspector, but that doesn't have to mean they don't interact I guess.
    I have tested reinstall, reboot etc, nothing helps.



  • I'll take a look at this in a second.  I pushed an updated package last night, but my build system had an updated ports tree, so it's likely I picked up the latest sql packages.  If need be, I'll push those out as well.

    –Bill



  • 0.8-7 appeared now and I installed it, uninstalled it and reinstalled it and still haven't been able to start IMspector.

    Use 1.2.2



  • @billm:

    I'll take a look at this in a second.  I pushed an updated package last night, but my build system had an updated ports tree, so it's likely I picked up the latest sql packages.  If need be, I'll push those out as well.

    –Bill

    Fixed.

    –Bill



  • @0tt0:

    0.8-7 appeared now and I installed it, uninstalled it and reinstalled it and still haven't been able to start IMspector.

    Use 1.2.2

    Dunno, it start right up for me.  I don't have a 1.2.2 box online right this second, I'll see if I can get that tested shortly.

    –Bill



  • Same problem. Can't start imspector. And can't sign in to msn if package is installed in pfsense.



  • OK, somehow I blew away the libimspector.so in the package (kinda crucial) - package deinstall doesn't seem to be working in 2.0 so I hadn't noticed that yet.  I pushed out a new package tarball, hopefully this fixes it for you guys - I can't do any more testing right this second, I have something else I have to do.  I'll be back in a couple hours to mess with it some more.

    –Bill



  • OK, good to go.  Had a few people test it out on 1.2.2 and they claim it starts up now.  De-install/Install … I didn't bump the package version.

    --Bill



  • Just did a re-install, now my IMspector 0.8-7 appears as running.
    This is on 1.2.2

    Thanks :)



  • Confirmed! It's working, now. Thanks.



  • Sorry about that…was planning on testing after commit, but got pulled away.  Not that it would have mattered with whatever bug is causing packages to not actually get deleted in 2.0.  grrr  FWIW, MySQL should work now - but I haven't actually tested that (which is why the package thread isn't updated) so YMMV.

    --Bill



  • YES, IMspector 0.8_7 is working now. Thanks to Bill.  ;D



  • I update imspector => all went well.
    Created a SQL (note light) user/database/password imspector 3x

    When activating Imspector :

    Mar 10 11:07:37 imspector: Logging Plugin name: MySQL IMSpector logging plugin
    ...
    Nice  :)

    It connect also : the database, created empty - had a table "imspector" created in it on the fly.

    I'll edit my post as soon as the first logs appear in the SQL database.

    You'll be able to bump the version number soon  ;D



  • Installed Version 0.88 and I can't see logs.



  • @Hugovsky:

    Installed Version 0.88 and I can't see logs.

    I'm just going to revert the work I did last night.  Apparently we don't have a new enough version of the prototype libraries in 1.2.x, so the work I did isn't going to work out and I'm not going to distribute prototype with the package.

    –Bill



  • Thx. I have another pf with version 0.87 working good.



  • So, as said below, using 0.8-8, now.

    Went away for about 2 hours, came back : SQL said to me : 2412 records logged  :)

    Btw : but nothing anymore : http://my_pfsense_IP/services_imspector_logs.php



  • Hi,

    Ok, now I'm getting confused. My 0.8-7 was running and when I saw an 0.8-8 version I installed that. That too installed and is running; however, the log viewer page is totally blank. It looks like the page "blinks" for a brief moment and then turns up totally empty, also to the left.

    I must have misread the earlier comments, I thought the latest should be ok.

    So, latest version (0.8-8) does not work here on 1.2.2, service is running but log viewer is broken.



  • @0tt0:

    Hi,

    Ok, now I'm getting confused. My 0.8-7 was running and when I saw an 0.8-8 version I installed that. That too installed and is running; however, the log viewer page is totally blank. It looks like the page "blinks" for a brief moment and then turns up totally empty, also to the left.

    I must have misread the earlier comments, I thought the latest should be ok.

    So, latest version (0.8-8) does not work here on 1.2.2, service is running but log viewer is broken.

    Log display issue only.  I made use of some PrototypeJS stuff that's only in 1.6, I didn't realize that the 1.2.x branch only had 1.5.  I'll be reverting the change and splitting the package into a -stable and a -beta.

    –Bill



  • Possible 0.8-8 bug?
    Attached here is the screenshot of my 0.8-8 Imspector pFsense 1.2.2

    jigp
    Davao City




  • Possible 0.8-9 bug again?
    Still there even if i reinstall or shutdown/start pfsense.
    Attached here also is the screenshot of my 0.8-9 Imspector pFsense 1.2.2

    jigp
    Davao City




  • I reported this bug earlier, it was there before too. I can only see it with chrome (ff works fine).



  • Good afternoon

    Thanks for the heads up :) Logging works 8.9 pfsense 1.2.2 but the bug still there (im using firefox,ephipany and konqueror - ubuntu). I`ll try chrome. Thanks :)

    jigp
    Davao City



  • Hi,

    I'm usually on Ubuntu (HW died..) but now sitting on virtual Win2003server and using Firefox, the log viewer looks perfect and service is running on 0.8-9.

    Thanx,



  • 0.8-9 Is working fine to me.



  • It works now :) but not logging in Xamp,Wamp nor EMS sql manager MYSQL.
    I have to go for now. Its late. Gotta catch up jeepney. See you guys tom.
    Thanks for the heads up :)

    jigp
    Davao City


Log in to reply