Project

General

Profile

Bug #1186

Prelude correlator

Added by Dominique Baron about 4 years ago. Updated about 4 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
-
Target version:
-
Start date:
02/07/2020
Due date:
% Done:

0%

Resolution:

Description

On CentOS Linux release 7.7.1908 restart of prelude-correlator fail with the following logs

Feb 07 09:20:08 ecs-prelude.novalocal prelude-correlator2812: File "/usr/lib/python3.6/site-packages/preludecorrelator/main.py", line 68, in load_plugins
Feb 07 09:20:08 ecs-prelude.novalocal prelude-correlator2812: context.load(self.profile)
Feb 07 09:20:08 ecs-prelude.novalocal prelude-correlator2812: File "/usr/lib/python3.6/site-packages/preludecorrelator/context.py", line 368, in load
Feb 07 09:20:08 ecs-prelude.novalocal prelude-correlator2812: CONTEXT_TABLE.update(ContextUnpickler(fd).load())
Feb 07 09:20:08 ecs-prelude.novalocal prelude-correlator2812: File "/usr/lib/python3.6/site-packages/preludecorrelator/context.py", line 108, in setstate
Feb 07 09:20:08 ecs-prelude.novalocal prelude-correlator2812: IDMEF._setstate__(self, dict)
Feb 07 09:20:08 ecs-prelude.novalocal prelude-correlator2812: RuntimeError: Cannot allocate memory
Feb 07 09:20:08 ecs-prelude.novalocal systemd1: prelude-correlator.service: main process exited, code=exited, status=1/FAILURE
Feb 07 09:20:08 ecs-prelude.novalocal systemd1: Unit prelude-correlator.service entered failed state.
Feb 07 09:20:08 ecs-prelude.novalocal systemd1: prelude-correlator.service failed.

History

#1 Updated by Thomas ANDREJAK about 4 years ago

  • Status changed from New to Resolved

Your context file seems corrupted or you put too many idmef alerts inside a context.

Remove the file /var/lib/prelude-correlator/prelude-correlator/context.dat and restart the correlator.

Regards

Also available in: Atom PDF