Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

path for tcpdump changed from /usr/sbin/tcpdump to /usr/bin/tcpdump #73

Closed
mmguero opened this issue Jan 26, 2022 · 1 comment · Fixed by cisagov/Malcolm#187
Closed

path for tcpdump changed from /usr/sbin/tcpdump to /usr/bin/tcpdump #73

mmguero opened this issue Jan 26, 2022 · 1 comment · Fixed by cisagov/Malcolm#187
Assignees
@mmguero
Labels
capture Relating to pcap-capture container sensor For issues dealing with the Hedgehog OS capture sensor

Comments

@mmguero
Copy link
Collaborator

mmguero commented Jan 26, 2022

For Debian 11 the path for the tcpdump binary changed from /usr/sbin/tcpdump to /usr/bin/tcpdump but this wasn't reflected in the hedgehog linux configuration code and needs to be.
@mmguero mmguero added capture Relating to pcap-capture container sensor For issues dealing with the Hedgehog OS capture sensor labels Jan 26, 2022
@mmguero mmguero self-assigned this Jan 26, 2022
mmguero added a commit to mmguero-dev/Malcolm that referenced this issue Jan 26, 2022
@mmguero
for idaholab#73, change the path for tcpdump from /usr/sbin to /usr/bin
83bafda
@mmguero
Copy link
Collaborator Author

mmguero commented Jan 26, 2022

Fixed with mmguero-dev/Malcolm@83bafda. Also checked netsniff-ng, but it's location is still correct.

@mmguero mmguero closed this as completed Jan 26, 2022
mmguero added a commit to cisagov/Malcolm that referenced this issue Jan 31, 2022
@mmguero
for idaholab#73, change the path for tcpdump from /usr/sbin to /usr/bin
1f6c294
@mmguero mmguero mentioned this issue Jan 31, 2022
Merged
mmguero added a commit that referenced this issue Jan 31, 2022
@mmguero
for #73, change the path for tcpdump from /usr/sbin to /usr/bin
e3209ee
mmguero added a commit to cisagov/Malcolm that referenced this issue Jan 31, 2022
@mmguero
Merge pull request #187 from cisagov/v523_merge
ba503df 
* Version bumps
    * Arkime [v3.3.1](https://github.com/arkime/arkime/blob/54fb9cb1ee007aa51bda0712e466fca525e1db71/CHANGELOG#L25-L30)
    * Zeek [v4.2.0](https://github.com/zeek/zeek/releases/tag/v4.2.0)

* Improvements
    * Added script and better documentation for putting Malcolm in "read-only" mode
    * Improved `Files` dashboard

* Bug fixes
    * Fixed an issue where Logstash wasn't parsing the `ftime` from `files.log` correctly (a field added by the Spicy ZIP analyzer)
    * Fixed idaholab#73 (path for tcpdump changed) for Hedgehog Linux
    * Fixed idaholab#72 (better file directory/name parsing and normalization in Logstash)
@mmguero mmguero added this to Malcolm Oct 14, 2024
@mmguero mmguero moved this to Released in Malcolm Oct 17, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@mmguero mmguero

Labels
capture Relating to pcap-capture container sensor For issues dealing with the Hedgehog OS capture sensor
Projects
Malcolm
Status: Released
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

v5.2.3 development cisagov/Malcolm
1 participant
@mmguero