RealeyesDBD Messages

RealeyesDBD Control messages

Control session: Initializing ...
Description (NOTE):
The main control thread is starting to initialize.
Response:
None.
Control session: Shutting down.
Description (NOTE):
The main control thread is shutting down.
Response:
None.
Control session: Error getting sensors.
Description (ERR):
The control thread was unable to get a list of sensors from the database.
Response:
Verify that at least one sensor is defined as active in the database. This is done by using the realeyesGUI Admin->Hosts menu selection.
Control session: Error creating I/O streams for sensor sensor name: error reason
Description (ERR):
The control thread was unable to establish a connection to the named sensor.
Response:
Troubleshoot the problem based on the error reason.
Control session: Connecting to sensor sensor name: ip address
Description (NOTE):
The control thread is attempting to establish a connection to the named sensor.
Response:
None.
Control session: Connection error: error reason
Description (ERR):
The control thread could not establish a connection to a sensor.
Response:
Troubleshoot the problem based on the error reason.
Control session: Connection to sensor established.
Description (NOTE):
The control thread successfully established a connection to a sensor.
Response:
None.
SSL Control session: Connecting to sensor sensor name: ip address
Description (NOTE):
The control thread is attempting to establish an SSL connection to the named sensor.
Response:
None.
SSL Control session: Connection error: error reason
Description (ERR):
The control thread could not establish an SSL connection to a sensor.
Response:
Troubleshoot the problem based on the error reason.
SSL Control session: Connection to sensor established.
Description (NOTE):
The control thread successfully established an SSL connection to a sensor.
Response:
None.
SSL Control session: sensor name disconnecting session.
Description (NOTE):
The control thread is disconnecting a connection to a sensor purposely.
Response:
None.
SSL Control session: sensor name error closing session: error reason.
Description (ERR):
The control thread could not disconnect a connection to a sensor cleanly.
Response:
Troubleshoot the problem based on the error reason.
SSL Control session: sensor name error reading message length.
Description (ERR):
The size of the message length field was incorrect and the session is shutdown.
Response:
Troubleshoot the problem based on previous or following error reasons.
SSL Control session: sensor name error reading message data.
Description (ERR):
There was an error while reading data from a sensor and the session is shutdown.
Response:
Troubleshoot the problem based on previous or following error reasons.
SSL Control session: sensor name error getting Input Stream error reason.
Description (ERR):
There was an error opening data buffers for the connected session.
Response:
Troubleshoot the problem based on the error reason.

RealeyesDBD Control Receiver messages

Control Receive: sensor name connecting to database...
Description (NOTE):
The control receiver thread is logging in to the database.
Response:
None.
Control Receive: sensor name session had fatal error - exiting.
Description (CRIT):
The control receiver thread is unable to login to the database.
Response:
Troubleshoot the problem based on previous error messages.
Control Receive: sensor name session had error clearing Hot IP list: database error.
Description (ERR):
The control receiver thread is unable to clear the Hot IP entries in the database.
Response:
Troubleshoot the problem based on the database error.
Control Receive: sensor name session had error refreshing Hot IP list: database error.
Description (ERR):
The control receiver thread is unable to get current the Hot IP entries in the database.
Response:
Troubleshoot the problem based on the database error.
Control Receive: sensor name session had error getting Statistics site ID: database error.
Description (ERR):
The control receiver thread is unable to get the site ID from the database.
Response:
Troubleshoot the problem based on the database error.
Control Receive: sensor name session had error getting Sstatistics interval: database error.
Description (ERR):
The control receiver thread is unable to get the defined Statistics intervals from the database.
Response:
Troubleshoot the problem based on the database error.
Control Receive: sensor name session received invalid Sstatistics interval.
Description (ERR):
The defined Statistics intervals from the database are invalid.
Response:
Validate the Statistics entries by using the Rules->Statistics menu selection in the realeyesGUI.
Control Receive: sensor name session had error adding base Statistics: database error.
Description (ERR):
The control receiver was unable to add the base Statistics definitions to the database.
Response:
Troubleshoot the problem based on the database error.
Control Receive: sensor name session received invalid statistics data - TCP ports.
Description (ERR):
The Statistics record from the sensor is truncated at the TCP ports field.
Response:
Report the problem to Realeyes support.
Control Receive: sensor name TCP ports: number of ports.
Description (NOTE):
The number of TCP ports in the Statistics record from the sensor.
Response:
None.
Control Receive: sensor name Statistics data truncated in TCP ports field.
Description (ERR):
The Statistics record from the sensor is truncated in the TCP ports data field.
Response:
Report the problem to Realeyes support.
Control Receive: sensor name session had error adding TCP statistics: database error.
Description (ERR):
The control receiver thread is unable to add the TCP ports Statistics to the database.
Response:
Troubleshoot the problem based on the database error.
Control Receive: sensor name received invalid Statistics data - TCP monitored ports.
Description (ERR):
The Statistics record from the sensor is truncated at the TCP monitored ports field.
Response:
Report the problem to Realeyes support.
Control Receive: sensor name TCP Monitored ports: number of ports.
Description (NOTE):
The number of monitored TCP ports in the Statistics record from the sensor.
Response:
None.
Control Receive: sensor name Connecting hosts: number of hosts.
Description (NOTE):
The number of hosts connecting to the TCP port in the Statistics record from the sensor.
Response:
None.
Control Receive: sensor name Statistics data truncated in monitor TCP port field.
Description (ERR):
The Statistics record from the sensor is truncated in the monitored TCP ports data field.
Response:
Report the problem to Realeyes support.
Control Receive: sensor name session had error adding port TCP monitoring statistics: database error.
Description (ERR):
The control receiver thread is unable to add the TCP monitored ports Statistics to the database.
Response:
Troubleshoot the problem based on the database error.
Control Receive: sensor name received invalid Statistics data - UDP ports.
Description (ERR):
The Statistics record from the sensor is truncated at the UDP ports field.
Response:
Report the problem to Realeyes support.
Control Receive: sensor name UDP ports: number of ports.
Description (NOTE):
The number of UDP ports in the Statistics record from the sensor.
Response:
None.
Control Receive: sensor name Statistics data truncated in UDP port field.
Description (ERR):
The Statistics record from the sensor is truncated in the UDP ports data field.
Response:
Report the problem to Realeyes support.
Control Receive: sensor name session had error adding UDP statistics: database error.
Description (ERR):
The control receiver thread is unable to add the UDP ports Statistics to the database.
Response:
Troubleshoot the problem based on the database error.
Control Receive: sensor name received invalid Statistics data - UDP monitored ports.
Description (ERR):
The Statistics record from the sensor is truncated at the UDP monitored ports field.
Response:
Report the problem to Realeyes support.
Control Receive: sensor name UDP monitored ports: number of ports.
Description (NOTE):
The number of UDP monitored ports in the Statistics record from the sensor.
Response:
None.
Control Receive: sensor name Connecting hosts: number of ports.
Description (NOTE):
The number of hosts connecting to the UDP port in the Statistics record from the sensor.
Response:
None.
Control Receive: sensor name Statistics data truncated in monitor UDP port field.
Description (ERR):
The Statistics record from the sensor is truncated in the monitored UDP ports data field.
Response:
Report the problem to Realeyes support.
Control Receive: sensor name session had error adding UDP port monitoring statistics: database error.
Description (ERR):
The control receiver thread is unable to add the monitored UDP ports Statistics to the database.
Response:
Troubleshoot the problem based on the database error.
Control Receive: sensor name received invalid Statistics data - IPv4 monitored hosts.
Description (ERR):
The Statistics record from the sensor is truncated at the IPv4 monitored hosts field.
Response:
Report the problem to Realeyes support.
Control Receive: sensor name Monitored IPv4 hosts: number of ports.
Description (NOTE):
The number of IPv4 hosts being monitored in the Statistics record from the sensor.
Response:
None.
Control Receive: sensor name ip address Connecting hosts: number of hosts.
Description (NOTE):
The number of hosts connecting to the IPv4 address in the Statistics record from the sensor.
Response:
None.
Control Receive: sensor name Statistics data truncated in monitor IPv4 host field.
Description (ERR):
The Statistics record from the sensor is truncated in the monitored IPv4 host data field.
Response:
Report the problem to Realeyes support.
Control Receive: sensor name session had error adding IPv4 host monitoring statistics: database error.
Description (ERR):
The control receiver thread is unable to add the monitored IPv4 hosts Statistics to the database.
Response:
Troubleshoot the problem based on the database error.
Control Receive: sensor name received invalid Statistics data - IPv6 monitored hosts.
Description (ERR):
The Statistics record from the sensor is truncated at the IPv6 monitored hosts field.
Response:
Report the problem to Realeyes support.
Control Receive: sensor name Monitored IPv6 hosts: number of hosts.
Description (NOTE):
The number of monitored IPv6 hosts in the Statistics record from the sensor.
Response:
None.
Control Receive: sensor name Connecting hosts: number of hosts.
Description (NOTE):
The number of hosts connecting to the monitored IPv6 host in the Statistics record from the sensor.
Response:
None.
Control Receive: sensor name Statistics data truncated in monitor IPv6 host field.
Description (ERR):
The Statistics record from the sensor is truncated in the monitored IPv6 hosts data field.
Response:
Report the problem to Realeyes support.
Control Receive: sensor name session had error adding IPv6 host monitoring statistics: database error.
Description (ERR):
The control receiver thread is unable to add the monitored IPv6 host Statistics to the database.
Response:
Troubleshoot the problem based on the database error.

RealeyesDBD Control Sender messages

Control Send: Initializing ...
Description (NOTE):
A sender control thread is starting to initialize.
Response:
None.
Control Send: Fatal error - exiting.
Description (CRIT):
The control sender thread is unable to login to the database.
Response:
Troubleshoot the problem based on previous error messages.
SSL Control Send: Error closing session: error reason.
Description (ERR):
The control thread could not disconnect a connection to a sensor cleanly.
Response:
Troubleshoot the problem based on the error reason.
Control Send: Monitoring for user requests.
Description (NOTE):
A sender control thread has started successfully.
Response:
None.
Control Send: Error getting control request: request
Description (ERR):
A sender control thread failed to get a user request from the database.
Response:
Report the problem to Realeyes support.
Control Send: Error getting host list: database error
Description (ERR):
A sender control thread failed to get the list of hosts from the database.
Response:
Troubleshoot the problem based on the database error.

RealeyesDBD Database messages

Database: (thread) Error loading the PostgreSQL JDBC driver: error reason
Description (ERR):
The interface to the database could not be loaded.
Response:
Troubleshoot the problem based on the error reason.
Database: (thread) Error connecting to the database: error reason
Description (ERR):
The connection to the database could not be established.
Response:
Troubleshoot the problem based on the error reason.
Database: (thread) Error disconnecting from the database: error reason
Description (ERR):
The connection to the database could not be cleanly shut down.
Response:
Troubleshoot the problem based on the error reason.
Database: (thread) Error executing the SQL query: query error reason
Description (ERR):
A query to the database failed.
Response:
Troubleshoot the problem based on the error reason.
Database: (thread) Error retrieving a single value: query error reason
Description (ERR):
A query to the database for a single value failed.
Response:
Troubleshoot the problem based on the error reason.
Database: (thread) Error executing an SQL statement: query error reason
Description (ERR):
A non-query SQL statement to the database failed.
Response:
Troubleshoot the problem based on the error reason.

RealeyesDBD Handler messages

Data session: sensor name initializing...
Description (NOTE):
A data thread is starting.
Response:
None.
Data session: sensor name had fatal error - exiting
Description (CRIT):
A data thread failed to initialize.
Response:
Troubleshoot on previous messages.
Data session: sensor name closing connection.
Description (NOTE):
A data thread is shutting down a connection to the named sensor.
Response:
None.
Data session: sensor name had error closing connection: error reason.
Description (ERR):
A data thread falied to shut down a connection to the named sensor.
Response:
Troubleshoot the problem based on the error reason.
Data session: sensor name had error closing SSL connection: error reason.
Description (ERR):
A data thread falied to shut down an SSL connection to the named sensor.
Response:
Troubleshoot the problem based on the error reason.
Data session: sensor name had error reading record length.
Description (ERR):
The record length field was invalid.
Response:
Troubleshoot the problem based on previous and following messages.
Data session: sensor name had error reading record.
Description (ERR):
The record data was invalid.
Response:
Troubleshoot the problem based on previous and following messages.
Data session: sensor name had error parsing record data: error reason.
Description (ERR):
The record could not be parsed correctly.
Response:
Troubleshoot the problem based on the error reason.
Data session: sensor name had network error: error reason.
Description (ERR):
The connection to the named sensor failed.
Response:
Troubleshoot the problem based on the error reason.
Data session: sensor name had error closing disconnected socket: error reason.
Description (ERR):
A data thread failed to shut down a connection to the named sensor after the sensor had already disconnected. This is done to allow reconnection attempts to be made.
Response:
Troubleshoot the problem based on the error reason.
Data session: sensor name connecting to sensor sensor name ip address...
Description (NOTE):
A data thread is attempting to establish a connection to the named sensor.
Response:
None.
Data session: sensor name had connection error: error reason.
Description (ERR):
The data thread failed connect to the named sensor.
Response:
Troubleshoot the problem based on the error reason.
Data session: sensor name connection to sensor established.
Description (NOTE):
The data thread successfully established a connection to the sensor.
Response:
None.
Data session: sensor name interrupted witing for connection attempt.
Description (ERR):
The data thread was interrupted waiting for the connection to the sensor to complete.
Response:
Troubleshoot the problem based on previous and following messages.
SSL Data session: sensor name connecting to sensor sensor name ip address...
Description (NOTE):
A data thread is attempting to establish an SSL connection to the named sensor.
Response:
None.
SSL Data session: sensor name had connection error: error reason.
Description (ERR):
The data thread failed connect to the sensor.
Response:
Troubleshoot the problem based on the error reason.
SSL Data session: sensor name had close error: error reason.
Description (ERR):
The data thread failed close the connection to the sensor so other attempts could be made.
Response:
Troubleshoot the problem based on the error reason.
SSL Data session: sensor name connection to sensor established.
Description (NOTE):
The data thread successfully established a connection to the sensor.
Response:
None.
SSL Data session: sensor name interrupted witing for connection attempt.
Description (ERR):
The data thread was interrupted waiting for the connection to the sensor to complete.
Response:
Troubleshoot the problem based on previous and following messages.

RealeyesDBD Parser messages

Parser: sensor name had error executing SQL Insert Statement: SQL Statement: error reason
Description (ERR):
The data thread was unable to insert data from an Analysis Record into the database.
Response:
Troubleshoot the problem based on the error reason.

RealeyesDBD Rules Export messages

Rules Export: Build Rules configuration files for sensor name
Description (NOTE):
The rule definitions will be built for the named sensor.
Response:
None.
Rules Export: Error removing configuration file filename
Description (ERR):
The named file could not be removed. This wastes disk space, but otherwise does not affect the application.
Response:
Try to manually remove the temporary files, which are located in the directory /tmp.
Rules Export: Building Event configuration file.
Description (NOTE):
The Event configuration file will be attempted to be built.
Response:
None.
Rules Export: Error opening file filename: error reason
Description (ERR):
The named file could not be opened for writing.
Response:
Troubleshoot the problem based on the error reason.
Rules Export: Error writing to file filename: error reason
Description (ERR):
There was an error writing to the named file.
Response:
Troubleshoot the problem based on the error reason.
Rules Export: Error collecting Event records: error reason
Description (ERR):
The Event records could not be retrieved from the database.
Response:
Validate the Event definitions using the RealeyesGUI Rules->Events menu selection. If correct, troubleshoot the problem based on the error reason.
Rules Export: Error closing file filename: error reason
Description (ERR):
The named file could not be closed.
Response:
Troubleshoot the problem based on the error reason.
Rules Export: Event definitions built = number of definitions
Description (NOTE):
The Event configuration files was built successfully.
Response:
None.
Rules Export: Error counting Action/Event records: error reason
Description (ERR):
The database failed to return a count of the Action/Event associated records.
Response:
Troubleshoot the problem based on the error reason.
Rules Export: Event event name has no Actions
Description (ERR):
Every Event should have Actions defined for it. While this will prevent expected behavior, processing continues.
Response:
Verify the Event definition using the RealeyesGUI Rules->Events menu selection.
Rules Export: Error collecting Action/Event records: error reason
Description (ERR):
The database failed to return the Action/Event associated records.
Response:
Validate the Action/Event definitions using the RealeyesGUI Rules->Events menu selection. If correct, troubleshoot the problem based on the error reason.
Rules Export: Building Action configuration file.
Description (NOTE):
The Action configuration file will be attempted to be built.
Response:
None.
Rules Export: Error collecting Action records: error reason
Description (ERR):
The Action records could not be retrieved from the database.
Response:
Validate the Action definitions using the RealeyesGUI Rules->Actions menu selection. If correct, troubleshoot the problem based on the error reason.
Rules Export: Action definitions built = number of definitions
Description (NOTE):
The Action configuration files was built successfully.
Response:
None.
Rules Export: Error counting Trigger/Action records: error reason
Description (ERR):
The database failed to return a count of the Trigger/Action associated records.
Response:
Troubleshoot the problem based on the error reason.
Rules Export: Action action name has no Triggers
Description (ERR):
Every Action should have Triggers defined for it. While this will prevent expected behavior, processing continues.
Response:
Verify the Action definition using the RealeyesGUI Rules->Actions menu selection.
Rules Export: Error collecting Trigger/Action records: error reason
Description (ERR):
The database failed to return the Trigger/Action associated records.
Response:
Validate the Trigger/Action definitions using the RealeyesGUI Rules->Actions menu selection. If correct, troubleshoot the problem based on the error reason.
Rules Export: Error collecting Statistics records: error reason
Description (ERR):
The Statistics records could not be retrieved from the database.
Response:
Validate the Statistics definitions using the RealeyesGUI Rules->Statistics menu selection. If correct, troubleshoot the problem based on the error reason.
Rules Export: Statistics network definitions built = number of definitions
Description (NOTE):
The Statistics network configuration was built successfully.
Response:
None.
Rules Export: Invalid port monitor protocol protocol
Description (ERR):
The only valid port protocols are TCP and UDP.
Response:
Correct the port monitoring definitions using the RealeyesGUI Rules->Statistics menu selection.
Rules Export: Error collecting Statistics monitoring records: error reason
Description (ERR):
The Statistics monitoring records could not be retrieved from the database.
Response:
Validate the Statistics monitoring definitions using the RealeyesGUI Rules->Statistics menu selection. If correct, troubleshoot the problem based on the error reason.
Rules Export: Statistics monitor definitions built = number of definitions
Description (NOTE):
The Statistics monitoring configuration was built successfully.
Response:
None.
Rules Export: Statistics definitions built
Description (NOTE):
The Statistics configuration was built successfully.
Response:
None.
Rules Export: Error Trigger plugin list: error reason
Description (ERR):
The Trigger plugin records could not be retrieved from the database.
Response:
Validate the Trigger definitions using the RealeyesGUI Rules->Triggers menu selection. If correct, troubleshoot the problem based on the error reason.
Rules Export: Building plugin Trigger (plugin type) configuration file.
Description (NOTE):
The Trigger configuration file for the named plugin will be attempted to be built.
Response:
None.
Rules Export: Invalid header Trigger value for trigger name: trigger value
Description (ERR):
An invalid value or no value was entered in the name Trigger definition.
Response:
Correct the Trigger definition using the RealeyesGUI Rules->Triggers menu selection.
Rules Export: Error collecting Trigger records: error reason
Description (ERR):
The Trigger records could not be retrieved from the database.
Response:
Validate the Trigger definitions using the RealeyesGUI Rules->Triggers menu selection. If correct, troubleshoot the problem based on the error reason.
Rules Export: Trigger definitions built = number of definitions
Description (NOTE):
The Trigger configuration was built successfully.
Response:
None.

RealeyesDBD Utilities messages

DBD Utility: Error getting sensor list: Failed to connect to database.
Description (ERR):
A session with the database could not be established.
Response:
Troubleshoot the problem based previous messages.
DBD Utility: Error getting sensor list - Exiting immediately: error reason
Description (ERR):
The sensor list could not be retrieved from the database.
Response:
Troubleshoot the problem based on the error reason.
DBD Utility: Error getting sensor list: No sensors defined in database.
Description (ERR):
The DBD requires that at least one sensor be defined in the database.
Response:
Define a sensor using the RealeyesGUI Admin->Hosts menu selection.

RealeyesDBD messages

RealeyesDBD: Database Daemon initializing...
Description (NOTE):
The application is starting.
Response:
None.
RealeyesDBD: Reading configuration file: filename
Description (NOTE):
The name of the configuration file being used for this run.
Response:
None.
RealeyesDBD: Initialization FATAL error: Problem with configuration file.
Description (CRIT):
The configuration file could not be parsed.
Response:
Troubleshoot based on previous messages or validate the configuration file displayed in the startup message.
RealeyesDBD: SAXException Error parsing XML configuration file: error reason
Description (ERR):
The configuration file could not be parsed.
Response:
Troubleshoot based on the error reason.
RealeyesDBD: IOException error reading XML configuration file: error reason
Description (ERR):
The configuration file could not be read.
Response:
Troubleshoot based on the error reason.
RealeyesDBD: Retrieving sensor list...
Description (NOTE):
The application is retrieving the list of sensors to establish connections with by the application.
Response:
None.
RealeyesDBD: Launch thread thread ID for sensor name - ip address
Description (NOTE):
A thread is being launched for the named sensor.
Response:
None.
RealeyesDBD: Launch Control thread.
Description (NOTE):
The main control thread is being launched.
Response:
None.
RealeyesDBD: Shutting down...
Description (NOTE):
The application shutdown message.
Response:
None.
RealeyesDBD: Error getting sensors, exiting immediately.
Description (CRIT):
The RealeyesDBD must have at least one sensor defined, but there was an error getting the sensor list.
Response:
Troubleshoot based on previous messages.
RealeyesDBD: SAX warning reading configuration file, exiting immediately: error reason
Description (ERR):
The XML parser returned a warning while reading the XML configuration file.
Response:
Troubleshoot based on error reason.
RealeyesDBD: SAX error reading configuration file, exiting immediately: error reason
Description (ERR):
The XML parser returned an error while reading the XML configuration file.
Response:
Troubleshoot based on error reason.
RealeyesDBD: SAX fatal error reading configuration file, exiting immediately: error reason
Description (CRIT):
The XML parser returned a fatal error while reading the XML configuration file.
Response:
Troubleshoot based on error reason.
RealeyesDBD: XML element name = element value
Description (NOTE):
The configuration values used in the current run are logged.
Response:
None.
RealeyesDBD: Port number outside range (1 - 65535), using default: port
Description (WARN):
The port definition is incorrect. The application continues, but if the sensor has been configured to use a port other than the default, no connection will be established. Note that there is no default port in the sensor IDS application, so it must have been configured using the port shown here at installation.
Response:
Validate the configuration file definition of the port.
RealeyesDBD: Invalid port number, using default: port
Description (WARN):
The port definition is non-numeric. The application continues, but if the sensor has been configured to use a port other than the default, no connection will be established. Note that there is no default port in the sensor IDS application, so it must have been configured using the port shown here at installation.
Response:
Validate the configuration file definition of the port.
RealeyesDBD: Command queue polling interval outside range (60 - 3600), using default: interval
Description (WARN):
The command queue polling interval is incorrect. The application continues but performance may not be as expected.
Response:
Validate the configuration file definition of the polling interval.
RealeyesDBD: Invalid command queue polling interval, using default: interval
Description (WARN):
The command queue polling interval is non-numeric. The application continues but performance may not be as expected.
Response:
Validate the configuration file definition of the polling interval.
Generated on Sat Apr 18 20:27:41 2009 for RealeyesDBD by doxygen 1.3.6