From mboxrd@z Thu Jan  1 00:00:00 1970
From: Stefan Schantl <stefan.schantl@ipfire.org>
To: development@lists.ipfire.org
Subject: Re: Betatest Guardian 2.0
Date: Thu, 28 Jul 2016 19:41:29 +0200
Message-ID: <1469727689.15771.1.camel@ipfire.org>
In-Reply-To: <575c8e84-ed8e-c139-e82b-02bfe919b298@ipfire.org>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============1538015122314560900=="
List-Id: <development.lists.ipfire.org>

--===============1538015122314560900==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Hello Matthias,

thanks for the hint - changed.

Best regards,

-Stefan
> Hi,
>=20
> On 26.07.2016 17:10, Michael Tremer wrote:
> >=20
> > Did anyone try to monitor the size of the log files that guardian
> > is parsing as
> > well? Could it be that every line that is read remains in memory?
> >=20
> > This is just an idea...
> Could be, but I'm not so firm with such behaviour. I'm using 'syslog'
> and memory raises, see below.
>=20
> Some things I found in the meantime while playing around:
>=20
> '/etc/init.d/guardian' needs a 'sleep'-command for restart-option.
> Otherwise we get a warning that '/usr/sbin/guardian' is still
> running:
>=20
> ...
> root(a)ipfire: ~ # /etc/init.d/guardian restart
> Stopping Guardian...
> Starting Guardian...
> Unable to continue: /usr/sbin/guardian is running
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=
=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0[ WARN ]
> ...
>=20
> After adding 'sleep 2' between '$0 stop' and '$0 start' in
> '/etc/init.d/guardian', warning is gone:
>=20
> ...
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0restart)
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=
=A0=C2=A0=C2=A0=C2=A0$0 stop
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=
=A0=C2=A0=C2=A0=C2=A0sleep 2
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=
=A0=C2=A0=C2=A0=C2=A0$0 start
> ...
>=20
> Output:
>=20
> root(a)ipfire: /etc/init.d # /etc/init.d/guardian restart
> Stopping Guardian...
> Starting Guardian...
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=
=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0[=C2=A0=C2=A0OK=C2=A0=C2=A0]
>=20
> ##########
>=20
> Each saving through GUI alters memory usage of 'guardian' process.
>=20
> Example (logging to 'syslog'!).
> While switching (e.g.) 'Loglevel' from '2' to '3' and back again,
> each
> saving alters memory usage for about 9 MB (see my former message
> above,
> 21.7.2016/11:07pm). I stopped at ~56289 MB.
>=20
> After stopping and starting 'guardian' process is at ~14334 MB again.
>=20
> If you do nothing, it stays there.
>=20
> ##########
>=20
> Saving firewall rules changes sometimes 'pstree'-output for
> 'guardian':
>=20
> Before:
>=20
> root(a)ipfire: /etc/init.d # pstree
> init-+-acpid
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|-6*[agetty]
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|-clamd---{clamd}
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|-collectd---3*[{collectd}]
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|-dhcpd
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|-dnsmasq
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|-fcron
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|-freshclam
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|-guardian---4*[{guardian}]
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|-httpd---10*[httpd]
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|-klogd
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|-privoxy---11*[{privoxy}]
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|-saslauthd---saslauthd
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|-snort---{snort}
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|-squid---squid-+-16*[redirect_wrappe-+-squid=
Guard]
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0=C2=
=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0`-squidclamav]
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0`-16*[{squid}]
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|-sshd---bash---pstree
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|-syslogd
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0`-udevd
>=20
> As you see, output for'guardian' is:
>=20
> ...
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|-guardian---4*[{guardian}]
>=20
> ...
>=20
> Today, after activating/deactivating one firewall rule and clicking
> 'Apply changes':
>=20
> root(a)ipfire: ~ # pstree
> init-+-acpid
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|-6*[agetty]
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|-clamd---2*[{clamd}]
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|-collectd---3*[{collectd}]
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|-dhcpd
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|-dnsmasq
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|-fcron
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|-freshclam
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|-guardian-+-iptables
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0`-4*[{guardian}]
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|-httpd---10*[httpd]
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|-klogd
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|-privoxy
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|-saslauthd---saslauthd
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|-snort---{snort}
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|-squid---squid-+-redirect_wrappe-+-squidGuard
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0=C2=
=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0`-=
squidclamav
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0`-16*[{squid}]
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|-sshd---bash---pstree
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|-syslogd
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0`-udevd
>=20
> Suddenly its says:
>=20
> ...
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|-guardian-+-iptables
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0`-4*[{guardian}]
> ...
>=20
> I don't know why, perhaps someone has an idea what happened here?
>=20
> Best,
> Matthias
>=20
> >=20
> > Best,
> > -Michael
> >=20
> > On Sat, 2016-07-23 at 00:23 +0200, Matthias Fischer wrote:
> > >=20
> > > Correction: in the meanwhile it jumped to 47890 KB, I don't know
> > > why.
> > > Logrotation?.
> > >=20
> > > On 22.07.2016 22:28, Matthias Fischer wrote:
> > > >=20
> > > > Hi,
> > > >=20
> > > > ...for the records...:
> > > >=20
> > > > Since I switched "Loglevel" to OFF, memory usage stays at
> > > > "14333 KB" and
> > > > didn't change/rise since then.
> > > >=20
> > > > HTH,
> > > > Matthias
> > > >=20
> > > > On 21.07.2016 23:07, Matthias Fischer wrote:
> > > > >=20
> > > > > Hi,
> > > > >=20
> > > > > Sounds interesting.
> > > > >=20
> > > > > So I thought I take a little test...
> > > > >=20
> > > > > Initial RAM-Usage: 14334 KB
> > > > >=20
> > > > > First I just switched logging, did nothing else:
> > > > >=20
> > > > > syslog =3D> file =3D> 22726 KB
> > > > > file =3D> syslog =3D> 31117 KB
> > > > > syslog =3D> file =3D> 39507/47898 KB (RAM suddenly altered. Why?
> > > > > No idea.)
> > > > > file =3D> syslog =3D> 56289 KB
> > > > >=20
> > > > > Restarted through console:
> > > > >=20
> > > > > root(a)ipfire: /var/log/guardian # guardianctrl restart
> > > > > Stopping Guardian...
> > > > > Starting Guardian...
> > > > > Unable to continue: /usr/sbin/guardian is running
> > > > > =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0[ WARN ]
> > > > >=20
> > > > > Hm?
> > > > >=20
> > > > > Stopped through console, no output, 'guardian' not found
> > > > > anymore,
> > > > > neither in GUI nor through console:
> > > > >=20
> > > > > root(a)ipfire: /var/log/guardian # ps ax | grep guardian
> > > > > =C2=A06962 pts/1=C2=A0=C2=A0=C2=A0=C2=A0S+=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A00:00 grep guardian
> > > > >=20
> > > > > Started through console and we're exactly where we started
> > > > > (14334 KB).
> > > > >=20
> > > > > The same happens if I switch the 'Priority-level' or the
> > > > > 'Firewall-
> > > > > Action'.
> > > > >=20
> > > > > Initial: 2
> > > > > 2 =3D> 3 =3D> 22723 KB
> > > > > 3 =3D> 2 =3D> 31112 KB
> > > > >=20
> > > > > Firewall-Action:
> > > > > Reject =3D> Drop =3D> 39501 KB
> > > > >=20
> > > > > Stop =3D> Start =3D> 14334 KB
> > > > >=20
> > > > > Interestingly, during MY (log-)switching, 'guardian' never
> > > > > stopped.
> > > > >=20
> > > > > HTH,
> > > > > Matthias
> > > > >=20
> > > > > On 21.07.2016 21:52, Flying Trashcan wrote:
> > > > > >=20
> > > > > > I am now noticing that when I switch from Log facility
> > > > > > =E2=80=9Cfile=E2=80=9D to
> > > > > > =E2=80=9Csyslog=E2=80=9D, Guardian Daemon stops and doesn=E2=80=
=99t
> > > > > > restart.=C2=A0=C2=A0Switching from
> > > > > > syslog to file didn=E2=80=99t stop the service, only switching ba=
ck
> > > > > > to syslog
> > > > > > from file.=C2=A0=C2=A0I can manually start the service and be bac=
k to
> > > > > > normal.=C2=A0=C2=A0Not
> > > > > > a big deal, but if someone made the switch and didn=E2=80=99t thi=
nk
> > > > > > to manually
> > > > > > start the service, it could be left without running
> > > > > > Guardian.
> > > > > >=20
> > > > > >=20
> > > > > >=20
> > > > > >=20
> > > > > > >=20
> > > > > > > On Jul 21, 2016, at 4:25 AM, Matthias Fischer <matthias.f
> > > > > > > ischer(a)ipfire
> > > > > > > .org> wrote:
> > > > > > >=20
> > > > > > > Hi,
> > > > > > >=20
> > > > > > > I mentioned this earlier, but it seems that 'guardian'
> > > > > > > has some kind
> > > > > > > of
> > > > > > > memory leak?
> > > > > > >=20
> > > > > > > It started about two days ago with ~14 MB RAM. Then it
> > > > > > > jumped to ~34
> > > > > > > MB,
> > > > > > > then to ~48 MB - today it suddenly uses 71 MB.
> > > > > > >=20
> > > > > > > And if I start it on my testmachine (offline!) it uses
> > > > > > > ~90 MB.
> > > > > > >=20
> > > > > > > Can someone confirm?
> > > > > > >=20
> > > > > > > Besides this, its working without seen problems.
> > > > > > >=20
> > > > > > > Best,
> > > > > > > Matthias
> > > > > > >=20
> > > > > > > On 20.07.2016 15:33, Stefan Schantl wrote:
> > > > > > > >=20
> > > > > > > > Hello testers,
> > > > > > > >=20
> > > > > > > > I've uploaded=C2=A0=C2=A0a new test version (003).
> > > > > > > >=20
> > > > > > > > Update or fresh install works like described in the
> > > > > > > > announcement
> > > > > > > > mail.
> > > > > > > >=20
> > > > > > > > The Changelog can be found here:
> > > > > > > >=20
> > > > > > > > http://people.ipfire.org/~stevee/guardian-2.0/Changelog
> > > > > > > > .txt
> > > > > > > >=20
> > > > > > > > At the moment I'm missing feedback for the following
> > > > > > > > functions:
> > > > > > > >=20
> > > > > > > > * Manually blocking / unblocking addresses.
> > > > > > > > * Dealing with the ignore list.
> > > > > > > > * Owncloud message parser.
> > > > > > > > * Logrotate, there should be an corresponding log entry
> > > > > > > > in the
> > > > > > > > guardian
> > > > > > > > logfile after rotation of the logfiles have been done.
> > > > > > > > * Reload of the ignore list after "Red" has been
> > > > > > > > reconnected. There
> > > > > > > > also a corresponding log entry should be logged to the
> > > > > > > > logfile and
> > > > > > > > the
> > > > > > > > new "Red-address" should also be logged as part of the
> > > > > > > > ignore list
> > > > > > > > (If
> > > > > > > > you own an dynamic assigned one).
> > > > > > > >=20
> > > > > > > > As always please report your bugs or experience with
> > > > > > > > the new version
> > > > > > > > to
> > > > > > > > this list.
> > > > > > > >=20
> > > > > > > > Best regards,
> > > > > > > >=20
> > > > > > > > -Stefan
> > > > > > > >=20
> > > > > > > > >=20
> > > > > > > > > Hello mailing list followers,
> > > > > > > > >=20
> > > > > > > > > this is the official release announcement for the
> > > > > > > > > first beta
> > > > > > > > > release
> > > > > > > > > of
> > > > > > > > > the new Guardian 2.0 approach.
> > > > > > > > >=20
> > > > > > > > >=20
> > > > > > > > > - What are the differences to the current version of
> > > > > > > > > guardian
> > > > > > > > > (legacy)
> > > > > > > > > and the first approach of guardian 2.0?
> > > > > > > > >=20
> > > > > > > > > The most important difference is, that the new
> > > > > > > > > version of Guardian
> > > > > > > > > 2.0
> > > > > > > > > completely has been re-written from scratch and
> > > > > > > > > released under the
> > > > > > > > > terms of the GPLv3. The legacy version of guardian is
> > > > > > > > > not
> > > > > > > > > maintained
> > > > > > > > > anymore by it's developer and the software has been
> > > > > > > > > released
> > > > > > > > > without
> > > > > > > > > any license details at all.
> > > > > > > > >=20
> > > > > > > > > Guardian 2.0 has a very modular code base and has
> > > > > > > > > been designed as
> > > > > > > > > a
> > > > > > > > > multi-threaded application. This allows a parallel
> > > > > > > > > parsing of all
> > > > > > > > > monitored logfiles and faster actions, if one of the
> > > > > > > > > used modules
> > > > > > > > > detects an attack.
> > > > > > > > >=20
> > > > > > > > > A very important difference to the legacy version is
> > > > > > > > > the support
> > > > > > > > > of
> > > > > > > > > configuring and managing the entire service through
> > > > > > > > > the IPFire
> > > > > > > > > webinterface. The entire configuration, managing of
> > > > > > > > > current
> > > > > > > > > blocked
> > > > > > > > > hosts, unblocking them or editing the ignored hosts
> > > > > > > > > list now can
> > > > > > > > > be
> > > > > > > > > done in a graphical way.=C2=A0
> > > > > > > > >=20
> > > > > > > > > The legacy version of guardian only supported parsing
> > > > > > > > > snort
> > > > > > > > > alerts.
> > > > > > > > > HTTPD and SSH support has been patched by the IPFire
> > > > > > > > > development
> > > > > > > > > team
> > > > > > > > > some time ago. Guardian 2.0 supports all of them out
> > > > > > > > > of the box
> > > > > > > > > and
> > > > > > > > > includes a filter to detect owncloud login brute-
> > > > > > > > > force attempts.
> > > > > > > > > As a
> > > > > > > > > benefit of the new modular design, additional filters
> > > > > > > > > easily can
> > > > > > > > > be
> > > > > > > > > added.
> > > > > > > > >=20
> > > > > > > > > Guardian 2.0 is able to reload it's configuration,
> > > > > > > > > reloading
> > > > > > > > > the ignore list during runtime and handle, if the
> > > > > > > > > logfiles will
> > > > > > > > > get
> > > > > > > > > rotated by logrotate. This actions can be called by
> > > > > > > > > using the
> > > > > > > > > webinterface or from the command line interface by
> > > > > > > > > using
> > > > > > > > > "guardianctrl".
> > > > > > > > >=20
> > > > > > > > > These are just a handful of the changes and benefits
> > > > > > > > > which comes
> > > > > > > > > with
> > > > > > > > > Guardian 2.0, a complete list would be to long for
> > > > > > > > > this mailing
> > > > > > > > > list.
> > > > > > > > >=20
> > > > > > > > >=20
> > > > > > > > > - How to join testing?
> > > > > > > > >=20
> > > > > > > > > To get part of the testing team, simple navigate to h
> > > > > > > > > ttp://people.
> > > > > > > > > ipf
> > > > > > > > > ir
> > > > > > > > > e.org/~stevee/guardian-2.0/ and download the latest
> > > > > > > > > tarball
> > > > > > > > > (currently
> > > > > > > > > 002). Please take care to download the correct one,
> > > > > > > > > based on your
> > > > > > > > > used
> > > > > > > > > architecture. The i585 packages are for 32Bit
> > > > > > > > > installations of
> > > > > > > > > IPFire,
> > > > > > > > > the x86_64 packages only can be used on 64Bit
> > > > > > > > > installations.
> > > > > > > > >=20
> > > > > > > > > Put the downloaded file on your IPFire test system
> > > > > > > > > and extract the
> > > > > > > > > package by using "tar -xvf guardian-2.0-
> > > > > > > > > 002.<arch>.tar.gz -C /".
> > > > > > > > >=20
> > > > > > > > > The final installation step would be to regenerate
> > > > > > > > > the language
> > > > > > > > > cache
> > > > > > > > > by executing "update-lang-cache" on the console.
> > > > > > > > >=20
> > > > > > > > > From now you can find a new menu item called
> > > > > > > > > "Guardian" in your
> > > > > > > > > "Service" menu after you have logged-in into your
> > > > > > > > > IPFire's
> > > > > > > > > webinterface.
> > > > > > > > >=20
> > > > > > > > > Documentation can be found on the IPFire wiki: http:/
> > > > > > > > > /wiki.ipfire.
> > > > > > > > > org
> > > > > > > > > /e
> > > > > > > > > n/addons/guardian/start#the_guardian_20_addon
> > > > > > > > >=20
> > > > > > > > >=20
> > > > > > > > > - Where to post bugs reports or provide feedback?
> > > > > > > > >=20
> > > > > > > > > If you find any bugs, please report them as usual on
> > > > > > > > > the IPFire
> > > > > > > > > bugtracker, which can be found at https://bugzilla.ip
> > > > > > > > > fire.org.
> > > > > > > > >=20
> > > > > > > > > To provide feedback or to join a discussion, please
> > > > > > > > > send your
> > > > > > > > > mails
> > > > > > > > > to
> > > > > > > > > "development(a)lists.ipfire.org" (Please register first
> > > > > > > > > at http://li
> > > > > > > > > sts
> > > > > > > > > .i
> > > > > > > > > pfire.org if not yet done).
> > > > > > > > >=20
> > > > > > > > > The source code can be found at http://git.ipfire.org
> > > > > > > > > /?p=3Dpeople/st
> > > > > > > > > eve
> > > > > > > > > e/
> > > > > > > > > guardian.git;a=3Dsummary
> > > > > > > > >=20
> > > > > > > > >=20
> > > > > > > > > Happy testing,
> > > > > > > > >=20
> > > > > > > > > -Stefan
> > > > > > > > >=20
> > > > > >=20
> > > > >=20
> > > >=20

--===============1538015122314560900==
Content-Type: application/pgp-signature
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="signature.asc"
MIME-Version: 1.0
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--===============1538015122314560900==--