Search found 13 matches

by Vark
27 Jul 2023, 00:11
Forum: General Discussion (csf)
Topic: Debian 12 / Perl 5.38 LFD not reading logs - *SOLUTION*
Replies: 5
Views: 3249

Re: Debian 12 / Perl 5.38 LFD not reading logs - *SOLUTION*

The clearerr fix is present in version 14.19
by Vark
27 Jul 2023, 00:08
Forum: Report Bugs (csf)
Topic: Issue with Perl 5.38 and fix
Replies: 4
Views: 9806

Re: Issue with Perl 5.38 and fix

Looking at the changelog for 14.19, this fix has been incorporated into their code :)
by Vark
26 Jul 2023, 05:03
Forum: Report Bugs (csf)
Topic: Issue with Perl 5.38 and fix
Replies: 4
Views: 9806

Re: Issue with Perl 5.38 and fix

Thanks for making the patch file, I'll snarf that back for my use! Are you seeing the portscan checks working OK? Mine don't seem to, but I'm not sure if that's from this change (or an affect somewhere else), or something I've configured (tho I've got it configured the same as another one on Debian ...
by Vark
26 Jul 2023, 05:01
Forum: General Discussion (csf)
Topic: Debian 12 / Perl 5.38 LFD not reading logs - *SOLUTION*
Replies: 5
Views: 3249

Re: Debian 12 / Perl 5.38 LFD not reading logs - *SOLUTION*

Interested if anyone else has tested/tried this mod - whilst it appears that it is reading the files, it doesn't appear to be spotting port scans (it is spotting other things, so for example I get the SUDO usage alerts). I've had to set the files back to standard (not high-precision) logging, in rsy...
by Vark
06 Jul 2023, 01:15
Forum: Report Bugs (csf)
Topic: Issue with Perl 5.38 and fix
Replies: 4
Views: 9806

Issue with Perl 5.38 and fix

[Copied to here as a suggestion to bring to the attention of devs] Hi, Following investigation there is a change in Perl 5.38 which breaks LFD (see Debian 12 LFD issues by me in General Discussions). https://perldoc.perl.org/perldelta#readline%28%29-no-longer-clears-the-stream-error-and-eof-flags As...
by Vark
04 Jul 2023, 05:11
Forum: General Discussion (csf)
Topic: Debian 12 / Perl 5.38 LFD not reading logs - *SOLUTION*
Replies: 5
Views: 3249

Re: Debian 12 / Perl 5.38 LFD not reading logs - *SOLUTION*

Just to remind that you'd need to do this mod every time LFD updates until it's incorporated somehow into a release version. Anyone know how I flag this to the maintainers?
by Vark
04 Jul 2023, 05:01
Forum: General Discussion (csf)
Topic: Debian 12 / Perl 5.38 LFD not reading logs - *SOLUTION*
Replies: 5
Views: 3249

Debian 12 / Perl 5.38 LFD not reading logs - *SOLUTION*

Hi, Following investigation there is a change in Perl 5.38 which breaks LFD. https://perldoc.perl.org/perldelta#readline()-no-longer-clears-the-stream-error-and-eof-flags As soon as one of the log files causes an error (e.g. is simply not present), all future log file reads on any file will fail unt...
by Vark
04 Jul 2023, 04:57
Forum: General Discussion (csf)
Topic: Debian 12 - LFD doesn't read logs
Replies: 8
Views: 5393

Re: Debian 12 - LFD doesn't read logs *SOLVED*

I found a solution! It's to do with changes in Perl 5.38 readline no longer clears errors, so once one read fails, so does every further read --> https://perldoc.perl.org/perldelta#readline()-no-longer-clears-the-stream-error-and-eof-flags You can overcome this by amending the lfd script and adding ...
by Vark
01 Jul 2023, 09:02
Forum: General Discussion (csf)
Topic: Debian 12 - LFD doesn't read logs
Replies: 8
Views: 5393

Re: Debian 12 - LFD doesn't read logs

The Regex pattern correctly identifies the code against an exemplar from the log, the issue appears to be it's simply not getting anything from the log when it tries to read. I added some extra output to the getlogfile function with LFD itself to get an idea of what it might be grabbing, and I get b...