09-19-2016 11:09 AM - edited 03-10-2019 06:41 AM
snort rule update are failing on my FMC
error is Connectivity problems. Unable to download rules
i ssh'd to the FMC and can connect to the internet. dns lookup is also working fine
in which log file can i get more information about this ?
09-19-2016 07:16 PM
Look under /var/log/sf for a directory dated the date of the failure. It should have "sru" in the name plus a time-date stamp. Within there you should find a detailed log.
Something like this:
admin@sfvdc:/var/log/sf/sru-2016-09-16-001-vrt$ ls -al
total 40
drwxr-xr-x 3 root root 4096 Sep 19 03:00 .
drwxr-xr-x 46 root root 8192 Sep 20 01:53 ..
-rw-r--r-- 1 root root 74 Sep 19 03:00 error_gui_msg
-rw-r--r-- 1 root root 163 Sep 19 03:00 flags.conf.complete
-rw-r--r-- 1 root root 3 Sep 19 03:00 non_fatal_rc
drwxr-xr-x 2 root root 4096 Sep 19 03:00 pre
-rw-r--r-- 1 root root 902 Sep 19 03:00 sru.log
-rw-r--r-- 1 root root 6 Sep 19 03:00 sru.pid
-rw-r--r-- 1 root root 327 Sep 19 03:00 status.log
admin@sfvdc:/var/log/sf/sru-2016-09-16-001-vrt$ more sru.log
[160919 03:00:10] Using root directory
[160919 03:00:10] #####################
[160919 03:00:10] # INSTALL STARTING
[160919 03:00:10] #####################
[160919 03:00:10]
[160919 03:00:10] BEGIN pre/000_start.sh
[160919 03:00:10] *************************************************************************
[160919 03:00:10] **** Starting PRE phase
[160919 03:00:10] *************************************************************************
[160919 03:00:10] COMPLETED pre/000_start.sh
[160919 03:00:10]
[160919 03:00:10] BEGIN pre/010_check_versions.sh
[160919 03:00:10] pre/010_check_versions.sh returned non-fatal error, exiting cleanly
[160919 03:00:10] Lock //tmp/sru.lock for install removed successfully.
[160919 03:00:10] Pruning logs and old installs
[160919 03:00:10]
[160919 03:00:10] ####################
[160919 03:00:10] # INSTALL COMPLETE
[160919 03:00:10] ####################
admin@sfvdc:/var/log/sf/sru-2016-09-16-001-vrt$
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide