stamusnetworks/selks-scripts

SELKS scripts

selks-scripts's Issues

selks-first-time-setup_stamus command not found

After having fresh install of selks 7 desktop and no-desktop, executing selks-first-time-setup_stamus command resulting command not found. In desktop version there's no FirstTimeSetup app, only the .txt file. Please help. Thanks.

Long wait on first time set up on existing SELKS5

When I try to run /opt/selks/Scripts/Setup/selks-first-time-setup_stamus.sh on an already set up SELKS5 - there is very long hang on the Moloch init par tof the script. But if I execute the scripts in /opt/selks/Scripts/Setup/selks-first-time-setup_stamus.sh one by one - it works fine no issue.

@Jeroen0494 - have you experienced something similar ?

Set tx to maximum value as well in idps-interface-tuneup_stamus

Hi,

It is recommended to maximize the buffers for both rx and tx to prevent packet drops. The script currently only sets a fixed buffer size of 4096 for rx. Line 26 should look like this:
/sbin/ethtool -G $IFACE rx 4096 tx 4096 >/dev/null 2>&1 ;

See here (network card config): https://github.com/aol/moloch/wiki/FAQ#why-am-i-dropping-packets

It would be even better to probe the network card compatibility and dynamically alter the buffer size accordingly (a bit ugly but it works):

RXBUFSIZE=$(ethtool -g $IFACE | grep -m1 RX: | grep -o '[[:digit:]]')
TXBUFSIZE=$(ethtool -g $IFACE | grep -m1 TX: | grep -o '[[:digit:]]')
/sbin/ethtool -G $IFACE rx $RXBUFSIZE tx $TXBUFSIZE >/dev/null 2>&1 ;

Cheers,
Jeroen Rijken

Upgrade Error

selks-scripts/Scripts/Setup/selks-secondstage-upgrade_stamus

Line 62 in f633dca

moloch_latest=$(curl https://api.github.com/repos/aol/moloch/tags -s |jq -r '.[0].name' | cut -c 2-)

Curl tries to parse the output of a redirect. Add -L to follow the redirect.

@@ -59,7 +59,7 @@
 /usr/bin/supervisorctl restart scirius 
 
 # Moloch upgrade
-moloch_latest=$(curl  https://api.github.com/repos/aol/moloch/tags  -s |jq -r '.[0].name' | cut -c 2-)
+moloch_latest=$(curl  https://api.github.com/repos/aol/moloch/tags -L -s |jq -r '.[0].name' | cut -c 2-)
 moloch_current=$(dpkg -l |grep moloch | awk '{print $3}')
 
 if dpkg --compare-versions ${moloch_latest} gt ${moloch_current} ; then

More details:

Without -L appears an error:

root@IDS-SELKS:~# curl  https://api.github.com/repos/aol/moloch/tags  -s |jq -r '.[0].name' | cut -c 2-
jq: error (at <stdin>:5): Cannot index object with number

Without -L the content:

root@IDS-SELKS:~# curl  https://api.github.com/repos/aol/moloch/tags  -s 
{
  "message": "Moved Permanently",
  "url": "https://api.github.com/repositories/4927517/tags",
  "documentation_url": "https://docs.github.com/v3/#http-redirects"
}

With -L to follow the redirect:

root@IDS-SELKS:~# curl  https://api.github.com/repos/aol/moloch/tags -L -s |jq -r '.[0].name' | cut -c 2-
2.7.0
root@IDS-SELKS:~# curl  https://api.github.com/repos/aol/moloch/tags -L -s 
[
  {
    "name": "v2.7.0",
    "zipball_url": "https://api.github.com/repos/arkime/arkime/zipball/v2.7.0",
    "tarball_url": "https://api.github.com/repos/arkime/arkime/tarball/v2.7.0",
[...]