Messages

1

General Discussion / Re: Crowdsec not starting at boot - even tried on a fresh OPNsense install

« on: April 13, 2023, 03:56:26 pm »

Thank you for your reply. I am using 1.0.2 version of os-crowdsec.

I tried all the steps you said including setting the password manually - and restarting the service always works fine without errors. However, the behaviour is still the same after reboot (error log in previous post). This just seems to be a function of something happening at boot.

I also just found this error at boot - dont know if this is causing an issue. Surprisingly it doesnt appear in dmesg, so was quite challenging to capture it!

FATAL13-04-2023 19:03:11] error while setting hub branch: Get "https://version.crowdsec.net/latest": dial tcp: lookup version.crowdsec.net on 8.8.8.8:53: dial udp 8.8.8.8:53: connect: network is unreachable

2

General Discussion / Crowdsec not starting at boot - even tried on a fresh OPNsense install

« on: April 13, 2023, 10:17:18 am »

After boot is complete - i can easily start it from the GUI.

time="13-04-2023 13:39:18" level=info msg="Adding leaky bucket" cfg=aged-violet file=/usr/local/etc/crowdsec/scenarios/ssh-bf.yaml name=crowdsecurity/ssh-bf
time="13-04-2023 13:39:18" level=info msg="Adding leaky bucket" cfg=old-thunder file=/usr/local/etc/crowdsec/scenarios/ssh-bf.yaml name=crowdsecurity/ssh-bf_user-enum
time="13-04-2023 13:39:18" level=warning msg="Loaded 6 scenarios"
time="13-04-2023 13:39:18" level=info msg="loading acquisition file : /usr/local/etc/crowdsec/acquis.yaml"
time="13-04-2023 13:39:18" level=warning msg="No matching files for pattern /var/log/nginx/*.log" type=file
time="13-04-2023 13:39:18" level=warning msg="No matching files for pattern ./tests/nginx/nginx.log" type=file
time="13-04-2023 13:39:18" level=warning msg="No matching files for pattern /var/log/auth.log" type=file
time="13-04-2023 13:39:18" level=warning msg="No matching files for pattern /var/log/syslog" type=file
time="13-04-2023 13:39:18" level=warning msg="No matching files for pattern /var/log/httpd-access.log" type=file
time="13-04-2023 13:39:18" level=warning msg="No matching files for pattern /var/log/httpd-error.log" type=file
time="13-04-2023 13:39:18" level=info msg="loading acquisition file : /usr/local/etc/crowdsec/acquis.d/opnsense.yaml"
time="13-04-2023 13:39:18" level=info msg="Adding file /var/log/audit/latest.log to datasources" type=file
time="13-04-2023 13:39:18" level=info msg="Adding file /var/log/lighttpd/latest.log to datasources" type=file
time="13-04-2023 13:39:18" level=error msg="Failed to notify(sent: false): <nil>"
time="13-04-2023 13:39:18" level=info msg="Starting processing data"
time="13-04-2023 13:39:18" level=fatal msg="starting outputs error : authenticate watcher (332a7b4ff9c1477e883ba3f3dc2ec2a7GzKMhgd8HfGCJf5F): Post \"http://10.27.27.1:8080/v1/watchers/login\": could not get jwt token: Post \"http://10.27.27.1:8080/v1/watchers/login\": dial tcp 10.27.27.1:8080: connect: permission denied"