cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
594
Views
0
Helpful
1
Replies

How can I execute "remediation api tool in sourcefire"??

jyjn08001
Level 1
Level 1

HI~

I wanna know how to get inventory information from sourcefire device using remediation api.

So, I connect to sourcefire and type a command "cd /var/sf/remediations".

there are 4 directories, and I wanna execute the 4 modules.

====================================================================

#./sfnmapr.pl perform_scan 192.168.100.51

Invalid remediation type. at /usr/local/sf/lib/perl/5.10.1/SF/RNA/Scanners/Nmap.pm line 861.

Printing stack trace:

        called from /usr/lib/perl5/site_perl/5.10.1/Error.pm (150)

        called from /usr/local/sf/lib/perl/5.10.1/SF/RNA/Scanners/Nmap.pm (861)

        called from ./sfnmapr.pl (86)

======================================================================

# ./set_attrib.pl

Use of uninitialized value $type in string eq at /usr/local/sf/lib/perl/5.10.1/SF/SFDataCorrelator/HostInput.pm line 2220.

Use of uninitialized value $type in string eq at /usr/local/sf/lib/perl/5.10.1/SF/SFDataCorrelator/HostInput.pm line 2220.

Error returned 1: attribute value set error

    called from '/usr/local/sf/lib/perl/5.10.1/SF/SFDataCorrelator/UserMessage.pm' (line:375)

    called from '/usr/local/sf/lib/perl/5.10.1/SF/SFDataCorrelator/UserMessage.pm' (line:402)

    called from '/usr/local/sf/lib/perl/5.10.1/SF/SFDataCorrelator/HostInput.pm' (line:2253)

    called from '/usr/local/sf/lib/perl/5.10.1/SF/SFDataCorrelator/HostInput.pm' (line:2229)

    called from './set_attrib.pl' (line:84)

Failed to send UserMessage [/usr/local/sf/lib/perl/5.10.1/SF/SFDataCorrelator/HostInput.pm,2254]

=======================================================================

another modules also do not work.

I wanna solve this problem, Why these modules do not work.

I use sourcefire Virtual Appliance, not sourcefire device.

please answer why these modules do not work..... thank you

1 Reply 1

amoherek
Cisco Employee
Cisco Employee

I think you might want to post your question in this forum: Sourcefire API | Cisco Support Community