Can Imspector run in PF2?



  • Hi, All

    I installed the imspector. but it can NOT log anthing.
    I check whether imspector run, it seems ok.

    $ ps ax
     .........
     5409  ??  Is     0:00.01 /usr/local/sbin/imspector -c /usr/local/etc/imspector
     5536  ??  I      0:00.00 /usr/local/sbin/imspector -c /usr/local/etc/imspector
     6355  ??  I      0:00.00 /usr/local/sbin/imspector -c /usr/local/etc/imspector
     ........
    

    and I can find the files!

    $ ls -l /usr/local/sbin/imspector
    -r-xr-xr-x  1 root  wheel  85724 Feb 18 04:33 /usr/local/sbin/imspector
    
    $ ls -l /usr/local/etc/imspector
    total 32
    -r--r--r--  1 root  wheel   275 Feb 18 04:33 acl.txt
    -r--r--r--  1 root  wheel   275 Feb 18 04:33 acl.txt.sample
    -r--r--r--  1 root  wheel   603 Feb 18 04:33 badwords.txt
    -r--r--r--  1 root  wheel   603 Feb 18 04:33 badwords.txt.sample
    -rw-r--r--  1 root  wheel     4 Mar 17 11:07 badwords_custom.txt
    -r--r--r--  1 root  wheel   212 Mar 17 11:07 imspector.conf
    -r--r--r--  1 root  wheel  2269 Feb 18 04:33 imspector.conf.sample
    
    

    but when I run "$ /usr/local/sbin/imspector -d" for debug.
    it shows nothing in result.

    so.. does anyone run imspector and log data success in PF2-RC1 ? ???



  • same problem here



  • i think imspector only works for old version of pfsense..
    let's just hope that they can release a version working with 2.0 RC1



  • Hello friend
    not wanting to discourage you but I've also tested by
    realized that does not work
    If you also notes in the package list is written
    and compatibility to your old version of pfsense 1.2.3
    Maybe not sure and also dont know if it's worth
    how has the new package by using own
    IMSpector ( http://www.imspector.org/wordpress/?page_id=35 ) site by installing pfsense shell
    Good Lucky



  • Those are the linux builds on the imspector site. The package maintainer did a good amount of work getting it to work on FreeBSD/pfsense, but it hasn't been touched in some time. If you really want it to work, a bounty might help.



  • any updates regrading this sick viewing tool?
    been waiting for it to run with the pfsense 2.0 rc1..



  • hi all

    peoples running imspector, i am facing a problem in 1.2.3 my clients start complaining about audio in msn, yahoo, skype, after installing imspector, any body faced this problem and fixd it?

    thanks in advance



  • Hello, everyone. I have same issue with imspector, any other solution to this

    Greettings



  • I am willing to pit in some cash to make a bounty on making the latest snapshot of imspector (that has support for MSN Live Messenger 2011) work on pfSense 2. I'm not sure how it would work to have several people pit in on a bounty now that bounties have to be paid up front, but I'm sure someone has a good solution that can be used. :-)



  • Has anyone find a workaround to this? i found http://redmine.pfsense.org/issues/1328 (imspector included).

    Is it something not well configured on the package, it seems that messages are not reaching imspector.

    This is what i got, but it is not present on /tmp/rules.debug is it correct?
    : pfctl -aimspector -sn
    rdr pass on rl0 inet proto tcp from any to any port = 1863 -> 127.0.0.1 port 16667



  • I can also confirm this is broken. Might as well be deleted  from the 2.0 package repo if it won't be fixed. Just confuses people now


  • Rebel Alliance Developer Netgate

    Give imspector another try on 2.0. The underlying version hasn't been updated, but the nat rules should be correct now. I confirmed it was logging for me with at least Yahoo.



  • @jimp:

    Give imspector another try on 2.0. The underlying version hasn't been updated, but the nat rules should be correct now. I confirmed it was logging for me with at least Yahoo.

    Dear sir,
    would you share your setting about NAT rules ? how did it work ?
    very thanks ! :)


  • Rebel Alliance Developer Netgate

    I needed no extra nat rules. once I fixed the bug in the package, it just worked.



  • Nice, i can confirm it works for MSN also.

    Thank you sir



  • @jimp:

    I needed no extra nat rules. once I fixed the bug in the package, it just worked.

    Thanks, is there some issues with the newest version or could you upgrade to it too at some point? Would a bounty speedup the process? =)


  • Rebel Alliance Developer Netgate

    I answered you on IRC but I'll repeat it here:  There is an updated version in the works, it's being sponsored by a commercial support customer. If you want to add some money for it, I'm sure the developer (it isn't me) would gladly appreciate it.

    No ETA on it, but it will be based on the latest version of imspector, and also support other protocols like Jabber, and it will also handle SSL (though that requires loading a 'trusted' CA on the clients)



  • THE Imspector 0.8-10  has released.
    It can work now! It can log the messages on my host now.
    I want to say BIG THANKS to those contributors !!

    you 're so good!  :)



  • I finally got home from my annual training with the military, 21 long days..lol… But i noticed a surprise that Imspector has been updated to work on 2.0. I gave it a try and it is logging yahoo and msn chats :-)

    I have found an issue with it tho. Not sure if I should start a new thread on my issue, if so, I will.

    I use my xbox 360 w kinect for video chatting via MSN. When inspector is enabled, I can't connect MSN via my xbox but all my PC clients can. When impector is disabled, I can connect to MSN again via my xbox. I'm thinking its a NAT issue.. Currently my xbox is setup for uPnP with no static port mappings and i'm using Automatic outbound NAT rule generation for NAT.

    Any ideas? Thanks in advance!


  • Rebel Alliance Developer Netgate

    It's probably something that has been fixed in the new imspector package that isn't out yet. It's still a work-in-progress. (If you are running amd64 you can install it though)



  • @jimp:

    It's probably something that has been fixed in the new imspector package that isn't out yet. It's still a work-in-progress. (If you are running amd64 you can install it though)

    Thanks for the quick reply jimp! Another reason why I should switch platforms…LOL.. I'll wait for the i386 to be release and retest then.


Locked