01_momentum_Apps » 02_PASTE

Hi zoelin:

PASTE has "show tech support" command.
And I enhanced the function on PASTE ver4.07.00.
Please give more information.

Please perform the following procedure.

1. check release information (It is only Japanese information.)
   http://tapas.terilogy.com/news/155
2. check update steps (It is only Japanese information.)
   http://tapas.terilogy.com/projects/paste/wiki/How_to_use_it#39-バージョンアップについて
3. download PASTE ver4.07.00
   http://tapas.terilogy.com/attachments/download/1499/syslog_integration-4.07.00-20170905.tgz
4. update PASTE to ver4.07.00
5. input some syslog messages to PASTE
6. wait 2minutes
7. execute show tech support command
   /opt/momentum_client/bin/show_tech_support.sh
8. post the output file to forum of PASTE

The output sample of "show tech command" is as follows.

# /opt/momentum_client/bin/show_tech_support.sh 

[ show tech support information for PASTE ]
  filename          : /root/paste_show_tech_support-20170906075021.tgz
  file size (bytes) : 23,825

# 

Hi Komoriya,

Thank you for the instructions.
I've upgrade PASTE to the latest ver4.07.01.
Attached are the results of 'show_tech_support' srcript with and without iptables running.

I found the problem may be caused by iptables.
For security reasons, my customer use iptables on PASTE (not the default firewalld) to allow only a few traffic, and block all other connections.
Below is the traffic allowed by iptables:
- dst port SSH, HTTP, HTTPS from client PCs
- src port TCP 5100, TCP 5101 from momentum Probe
- dst port UDP 514 from Trand Micro DDI
- src port UDP 53 from DNS server
- src port UDP 123 from NTP server

PASTE cannot retrieve pcap after receiving syslog from Trend Micro DDI when iptables is running.
After stopping iptables, PASTE works fine then.
What are the iptables rules I should add?

And here is a new question about disk usage status in Web GUI:
Sometimes the graphic is blank. (Please refer to the attached screenshot.)
I have run in to this situation several times with ver4.07.00 and ver4.07.01.
How can I solve this problem?

Best Regards,
Zoe

Hi zoelin:

After stopping iptables, PASTE works fine then.

I was relieved.
If just ordinarily installing PASTE, I think that PASTE works fine.

You have to set iptables correctly.
How about using LOG option of iptables?
I hope that it works fine.

Sometimes the graphic is blank. (Please refer to the attached screenshot.)

When it's blank, please execute this perl script and post the result.

#!/usr/bin/perl

use Filesys::Df;

$pcappath = "/var/pcap";

$disk_info = df($pcappath);
$total_usage = $disk_info->{blocks};
$used = $disk_info->{used};
$etc_usage = $used - $disk_pcap_usage;
$etc_rate = int($etc_usage / $total_usage * 100);
$free_size = $disk_info->{bfree};
$free_rate = int($free_size / $total_usage * 100);

print "total_usage:[$total_usage]\n";
print "used       :[$used]\n";
print "etc_usage  :[$etc_usage]\n";
print "etc_rate   :[$etc_rate]\n";
print "free_size  :[$free_size]\n";
print "free_rate  :[$free_rate]\n";

print "\n";
print `df`;