Koozali.org: home of the SME Server
Obsolete Releases => SME VoIP (Asterisk, SAIL etc) => Topic started by: ajkeane on January 09, 2011, 06:27:44 AM
-
Hi I have been getting these error messages in the logs since 9.50 this morning after a reconfigure.
I had installed the following contribs prior to the reconfigure.
phpsysinfo
Openvpn bridge and phpki
kplaylist
SMEserver-dar2
Awstats
They show up every 5 minutes.
No target machines/networks specified!
QUITTING!
Just wonddering if anyone can point me in the right direction to isolate the issue.
Cheers
Tony
-
Hi Tony
It's a message which comes out of nmap when it has been given an incorrect parameter list. This particular instance of nmap is being called by the sark/sail network sniffer (/opt/sark/scripts/perlarp.pl) which gets run every 5 minutes by cron.d/sark.
What does the output of ifconfig eth0 give?
Kind Regards
S
-
Sorry for taking so long to come back to you.
The output of ifconfig eth0 is
eth0 Link encap:Ethernet HWaddr 00:14:D1:1A:4F:32
inet6 addr: fe80::214:d1ff:fe1a:4f32/64 Scope:Link
UP BROADCAST RUNNING PROMISC MULTICAST MTU:1500 Metric:1
RX packets:538215 errors:0 dropped:0 overruns:0 frame:0
TX packets:549750 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:72661046 (69.2 MiB) TX bytes:402081464 (383.4 MiB)
Interrupt:177 Base address:0xe000
I also ran this on eth1 as this is my external interface
eth1 Link encap:Ethernet HWaddr 00:16:76:86:95:F8
inet addr:203.97.103.229 Bcast:203.97.103.255 Mask:255.255.255.0
inet6 addr: fe80::216:76ff:fe86:95f8/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:1572394 errors:0 dropped:0 overruns:0 frame:0
TX packets:406187 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:412574635 (393.4 MiB) TX bytes:60853790 (58.0 MiB)
Interrupt:169 Base address:0xc100
Thanks
Tony
-
Hello Tony
The sniffer doesn't like ipV6. You can simply turn it off. Just comment out line 2 in /etc/cron.d/sark. This means that the "Orphan" search (in extensions.conf) won't work.
Kind Regards
S
-
Must we replace line 2 in /etc/cron.d/sark
*/5 * * * * root perl /opt/sark/scripts/perlarp.pl
with
# */5 * * * * root perl /opt/sark/scripts/perlarp.pl
?
-
Yes - that's the one.
It will stop it from sniffing the network every 5 minutes.
Kind Regards
S
-
Thanks that got it sorted.
Now back to getting it all configured.
Cheers
Tony