49 lines
8.0 KiB
Plaintext
49 lines
8.0 KiB
Plaintext
|
|
Mar 25 11:33:41 debian pfperl-api-docker-wrapper[168831]: pfperl-api(14) INFO: [mac:[undef]] processed 0 security_events during security_event maintenance (1742882621.46462 1742882621.47351) (pf::security_event::security_event_maintenance)
|
|
Mar 25 11:33:42 debian pfperl-api-docker-wrapper[168831]: pfperl-api(14) INFO: [mac:[undef]] getting security_events triggers for accounting cleanup (pf::accounting::acct_maintenance)
|
|
Mar 25 11:33:42 debian pfperl-api-docker-wrapper[168831]: pfperl-api(13) INFO: [mac:[undef]] Using 300 resolution threshold (pf::pfcron::task::cluster_check::run)
|
|
Mar 25 11:33:42 debian pfperl-api-docker-wrapper[168831]: pfperl-api(13) INFO: [mac:[undef]] All cluster members are running the same configuration version (pf::pfcron::task::cluster_check::run)
|
|
Mar 25 11:33:50 debian httpd.aaa-docker-wrapper[169585]: httpd.aaa(8) INFO: [mac:e4:b9:7a:56:36:4c] handling radius autz request: from switch_ip => (172.20.100.10), connection_type => Ethernet-NoEAP, switch_mac => (08:17:35:5b:1e:94), mac => [e4:b9:7a:56:36:4c], port => 75, username => "e4b97a56364c" (pf::radius::authorize)
|
|
Mar 25 11:33:50 debian httpd.aaa-docker-wrapper[169585]: httpd.aaa(8) INFO: [mac:e4:b9:7a:56:36:4c] Instantiate profile Compliance_connection (pf::Connection::ProfileFactory::_from_profile)
|
|
Mar 25 11:33:50 debian httpd.aaa-docker-wrapper[169585]: httpd.aaa(8) INFO: [mac:e4:b9:7a:56:36:4c] highest priority security_event is 1200001. Target Role for security_event: registration (pf::role::getIsolationRole)
|
|
Mar 25 11:33:50 debian httpd.aaa-docker-wrapper[169585]: httpd.aaa(8) INFO: [mac:e4:b9:7a:56:36:4c] (172.20.100.10) Added VLAN 102 to the returned RADIUS Access-Accept (pf::Switch::returnRadiusAccessAccept)
|
|
Mar 25 11:33:50 debian httpd.aaa-docker-wrapper[169585]: httpd.aaa(8) WARN: [mac:e4:b9:7a:56:36:4c] No parameter registrationRole found in conf/switches.conf for the switch 172.20.100.10 (pf::Switch::getRoleByName)
|
|
Mar 25 11:33:50 debian httpd.aaa-docker-wrapper[169585]: httpd.aaa(8) INFO: [mac:e4:b9:7a:56:36:4c] Updating locationlog from accounting request (pf::api::handle_accounting_metadata)
|
|
Mar 25 11:33:51 debian pfqueue-backend[169809]: pfqueue(169440) INFO: [mac:[undef]] Running task api (main::process_data)
|
|
Mar 25 11:33:51 debian pfqueue-backend[169809]: pfqueue(169440) INFO: [mac:[undef]] Calling api task process_dhcpv6 (pf::task::api::doTask)
|
|
Mar 25 11:33:53 debian pfqueue-backend[169809]: pfqueue(169440) INFO: [mac:unknown] Running task api (main::process_data)
|
|
Mar 25 11:33:53 debian pfqueue-backend[169809]: pfqueue(169440) INFO: [mac:unknown] Calling api task process_dhcpv4 (pf::task::api::doTask)
|
|
Mar 25 11:33:53 debian pfqueue-backend[169790]: pfqueue(169440) INFO: [mac:[undef]] Running task api (main::process_data)
|
|
Mar 25 11:33:53 debian pfqueue-backend[169790]: pfqueue(169440) INFO: [mac:[undef]] Calling api task process_dhcpv4 (pf::task::api::doTask)
|
|
Mar 25 11:33:53 debian pfqueue-backend[169810]: pfqueue(169440) INFO: [mac:[undef]] Running task api (main::process_data)
|
|
Mar 25 11:33:53 debian pfqueue-backend[169810]: pfqueue(169440) INFO: [mac:[undef]] Calling api task process_dhcpv6 (pf::task::api::doTask)
|
|
Mar 25 11:33:53 debian pfqueue-backend[169809]: pfqueue(169440) INFO: [mac:unknown] DHCPREQUEST from e4:b9:7a:56:36:4c (192.168.102.160) (pf::dhcp::processor_v4::parse_dhcp_request)
|
|
Mar 25 11:33:53 debian pfqueue-backend[169809]: pfqueue(169440) INFO: [mac:unknown] The listener process is NOT on the same server as the DHCP server. (pf::dhcp::processor_v4::pf_is_dhcp)
|
|
Mar 25 11:33:53 debian pfqueue-backend[169790]: pfqueue(169440) INFO: [mac:unknown] DHCPACK from 192.168.102.1 (18:b1:69:bd:9e:a4) to host e4:b9:7a:56:36:4c (192.168.102.160) for 86400 seconds (pf::dhcp::processor_v4::parse_dhcp_ack)
|
|
Mar 25 11:33:53 debian pfqueue-backend[169790]: pfqueue(169440) INFO: [mac:unknown] The listener process is NOT on the same server as the DHCP server. (pf::dhcp::processor_v4::pf_is_dhcp)
|
|
Mar 25 11:33:54 debian httpd.webservices-docker-wrapper[169506]: httpd.webservices(5482) INFO: [mac:e4:b9:7a:56:36:4c] Instantiate profile Compliance_connection (pf::Connection::ProfileFactory::_from_profile)
|
|
Mar 25 11:33:54 debian httpd.webservices-docker-wrapper[169506]: httpd.webservices(5482) WARN: [mac:e4:b9:7a:56:36:4c] hostscan detected from e4:b9:7a:56:36:4c, but security_event 1200001 exists - ignoring (pf::security_event::security_event_add)
|
|
Mar 25 11:33:54 debian httpd.webservices-docker-wrapper[169506]: httpd.webservices(5482) INFO: [mac:e4:b9:7a:56:36:4c] Pre Registration Scan - Current Scan Engine is : Rapid_integ (pf::api::trigger_scan)
|
|
Mar 25 11:33:55 debian httpd.webservices-docker-wrapper[169506]: httpd.webservices(5482) INFO: [mac:e4:b9:7a:56:36:4c] Instantiate profile Compliance_connection (pf::Connection::ProfileFactory::_from_profile)
|
|
Mar 25 11:33:55 debian httpd.webservices-docker-wrapper[169506]: httpd.webservices(5482) INFO: [mac:e4:b9:7a:56:36:4c] New ID generated: 174288263542364c (pf::util::generate_id)
|
|
Mar 25 11:33:55 debian httpd.webservices-docker-wrapper[169506]: httpd.webservices(5482) INFO: [mac:e4:b9:7a:56:36:4c] Starting Rapid7 scan (pf::scan::rapid7::startScan)
|
|
Mar 25 11:33:55 debian httpd.webservices-docker-wrapper[169506]: httpd.webservices(5482) WARN: [mac:e4:b9:7a:56:36:4c] Use of uninitialized value in concatenation (.) or string at /usr/local/pf/lib/pf/scan/rapid7.pm line 186.
|
|
Mar 25 11:33:55 debian httpd.webservices-docker-wrapper[169506]: httpd.webservices(5482) WARN: [mac:e4:b9:7a:56:36:4c] Use of uninitialized value in concatenation (.) or string at /usr/local/pf/lib/pf/scan/rapid7.pm line 193.
|
|
Mar 25 11:33:55 debian httpd.webservices-docker-wrapper[169506]: httpd.webservices(5482) WARN: [mac:e4:b9:7a:56:36:4c] Rapid7 API request on https://172.20.100.62:3780/api/3/sites//scans failed: 500 Can't connect to 172.20.100.62:3780 (certificate verify failed) (pf::scan::rapid7::doRequest)
|
|
Mar 25 11:33:55 debian httpd.webservices-docker-wrapper[169506]: httpd.webservices(5482) WARN: [mac:e4:b9:7a:56:36:4c] Rapid7 scan didnt start: 500 Can't connect to 172.20.100.62:3780 (certificate verify failed) (pf::scan::rapid7::startScan)
|
|
Mar 25 11:33:55 debian httpd.webservices-docker-wrapper[169506]: httpd.webservices(5485) INFO: [mac:e4:b9:7a:56:36:4c] security_event 1200005 closed for e4:b9:7a:56:36:4c (pf::security_event::security_event_close)
|
|
Mar 25 11:33:58 debian pfqueue-backend[169809]: pfqueue(169440) INFO: [mac:unknown] Running task api (main::process_data)
|
|
Mar 25 11:33:58 debian pfqueue-backend[169809]: pfqueue(169440) INFO: [mac:unknown] Calling api task process_dhcpv6 (pf::task::api::doTask)
|
|
Mar 25 11:34:06 debian pfqueue-backend[169823]: pfqueue(169440) INFO: [mac:[undef]] Running task api (main::process_data)
|
|
Mar 25 11:34:06 debian pfqueue-backend[169823]: pfqueue(169440) INFO: [mac:[undef]] Calling api task process_dhcpv6 (pf::task::api::doTask)
|
|
Mar 25 11:34:21 debian pfqueue-backend[169815]: pfqueue(169440) INFO: [mac:[undef]] Running task api (main::process_data)
|
|
Mar 25 11:34:21 debian pfqueue-backend[169815]: pfqueue(169440) INFO: [mac:[undef]] Calling api task process_dhcpv6 (pf::task::api::doTask)
|
|
Mar 25 11:34:41 debian pfperl-api-docker-wrapper[168831]: pfperl-api(17) INFO: [mac:[undef]] getting security_events triggers for accounting cleanup (pf::accounting::acct_maintenance)
|
|
Mar 25 11:34:42 debian pfperl-api-docker-wrapper[168831]: pfperl-api(18) INFO: [mac:[undef]] Using 300 resolution threshold (pf::pfcron::task::cluster_check::run)
|
|
Mar 25 11:34:42 debian pfperl-api-docker-wrapper[168831]: pfperl-api(18) INFO: [mac:[undef]] All cluster members are running the same configuration version (pf::pfcron::task::cluster_check::run)
|
|
Mar 25 11:34:42 debian pfperl-api-docker-wrapper[168831]: pfperl-api(17) INFO: [mac:[undef]] processed 0 security_events during security_event maintenance (1742882682.12818 1742882682.13717) (pf::security_event::security_event_maintenance)
|
|
Mar 25 11:34:54 debian pfqueue-backend[169810]: pfqueue(169440) INFO: [mac:unknown] Running task api (main::process_data)
|
|
Mar 25 11:34:54 debian pfqueue-backend[169810]: pfqueue(169440) INFO: [mac:unknown] Calling api task process_dhcpv6 (pf::task::api::doTask)
|
|
^C
|
|
root@debian:~#
|