yulong-hids-archived

yulong-hids-archived copied to clipboard

对进程的规则不起作用

2

是因为c.Info.Type是processlist，r.Source是process是匹配不上的

medasz

I downloaded the latest code and compiled them successfully. After deployment of the server side, I start the agent using command as ‘agent.exe [IP]’, process monitoring could not be started...

KeeWong1987

cnetos insmod syshook_execve.ko 内核版本 3.10.0-862.el7.x86_64 导致机器挂掉

3

simlelcf

请问下，centos 启动agent时，瞬间把文件描述符打到65K，机器搞死了，怎么解决这个bug

RonnieNiu

medasz

Agent安装失败

2

用过Centos7 也用过Ubuntu18.04都是一样的错误 root@ubuntu:/tmp# /tmp/daemon -install -netloc ×××× 2020/02/10 15:46:30 Download Agent panic: runtime error: invalid memory address or nil pointer dereference [signal SIGSEGV: segmentation violation code=0x1 addr=0x18 pc=0x6a0ac8] goroutine 1...

iGen1us

server端总异常崩溃

4

部署三台agent 两个server端 ES、m都是单台部署的 按说客户端不多日志量应该不至于导致崩溃吧 我查到有其它go程序存在类似问题https://github.com/golang/go/issues/18137 以下为报错日志 fatal error: concurrent map iteration and map write goroutine 16 [running]: runtime.throw(0x9bde28, 0x26) /usr/local/go/src/runtime/panic.go:619 +0x81 fp=0xc420285480 sp=0xc420285460 pc=0x42b2a1 runtime.mapiternext(0xc4200ca300) /usr/local/go/src/runtime/hashmap.go:747 +0x55c fp=0xc420285510 sp=0xc420285480 pc=0x40a48c...

zntim

agent在windows和linux下都无法运行 Windows报0xc000007b linux 报 execute format error

iammaimai

https://github.com/ysrc/yulong-hids/blob/c156b3b162b78d941a4e84c64bd227af353caf3b/server/action/task.go#L55 TO: ` res := taskResult{task.TaskID, task.IP, "false", errMsg, time.Now()}`

NS-Sp4ce

我想把项目进行32位Linux的移植

1

但是在进行栈平衡的时候，首先寄存器不同，其次汇编指令比如pushq也不同，想问下需要如何操作呢，差了好多资料，还是不太清楚，谢谢了！

1iii