Hi,

I am having issues with the Trisul service stopping after a few seconds of starting it. I am running Trisol v2.4.1100. I am running Snort in the same box and I wanted to have both services running.

Log info:

From /usr/local/share/webtrisul/log/nginx.error.log

2012/10/29 16:49:52 [error] 30404#0: *1 no live upstreams while connecting to upstream, client: 10.40.73.9, server: localhost, request: "POST /sys_$
2012/10/29 16:49:53 [crit] 30404#0: *1 connect() to unix:/tmp/thin.webtrisul.4.sock failed (2: No such file or directory) while connecting to upstr$
2012/10/29 16:49:53 [crit] 30404#0: *1 connect() to unix:/tmp/thin.webtrisul.0.sock failed (2: No such file or directory) while connecting to upstr$
2012/10/29 16:49:53 [crit] 30404#0: *1 connect() to unix:/tmp/thin.webtrisul.1.sock failed (2: No such file or directory) while connecting to upstr$
2012/10/29 16:49:53 [crit] 30404#0: *1 connect() to unix:/tmp/thin.webtrisul.2.sock failed (2: No such file or directory) while connecting to upstr$
2012/10/29 16:49:53 [crit] 30404#0: *1 connect() to unix:/tmp/thin.webtrisul.3.sock failed (2: No such file or directory) while connecting to upstr$
2012/10/29 16:49:54 [error] 30404#0: *1 no live upstreams while connecting to upstream, client: 10.40.73.9, server: localhost, request: "POST /axup$
2012/10/29 17:06:24 [crit] 32202#0: *1 connect() to unix:/tmp/thin.webtrisul.4.sock failed (2: No such file or directory) while connecting to upstr$
2012/10/29 17:06:24 [crit] 32202#0: *1 connect() to unix:/tmp/thin.webtrisul.0.sock failed (2: No such file or directory) while connecting to upstr$
2012/10/29 17:06:24 [crit] 32202#0: *1 connect() to unix:/tmp/thin.webtrisul.1.sock failed (2: No such file or directory) while connecting to upstr$
2012/10/29 17:06:24 [crit] 32202#0: *1 connect() to unix:/tmp/thin.webtrisul.2.sock failed (2: No such file or directory) while connecting to upstr$
2012/10/29 17:06:24 [crit] 32202#0: *1 connect() to unix:/tmp/thin.webtrisul.3.sock failed (2: No such file or directory) while connecting to upstr$




/usr/local/var/log/trisul/ns-001.log


[32mMon Oct 29 16:24:13 2012.198275 DEBUG Transfer ownership : Already transferred /usr/local/var/lib/trisul/CONTEXT0/run/system.stats[m
[34mMon Oct 29 16:24:13 2012.198408 INFO Drop Privilege : Dropped down to user : sguil[m
[34mMon Oct 29 16:24:13 2012.199415 INFO Now running as user = sguil group = sguil[m
[34mMon Oct 29 16:24:13 2012.199445 INFO Trisul Server process id (pid) = 28896[m
[34mMon Oct 29 16:24:13 2012.199467 INFO Checking Redis unixsock /nsm/sensor_data/cfd-sosensor1-eth2/barnyard2_alert[m
[34mMon Oct 29 16:24:13 2012.199533 INFO Redis isnt reachable on/nsm/sensor_data/cfd-sosensor1-eth2/barnyard2_alert[m
[34mMon Oct 29 16:24:13 2012.199554 INFO Starting redis with config file /usr/local/etc/trisul/redis.conf[m
[34mMon Oct 29 16:24:15 2012.200038 INFO Started redis, retrying connect 1[m
[34mMon Oct 29 16:24:15 2012.200136 INFO Checking Redis unixsock /nsm/sensor_data/cfd-sosensor1-eth2/barnyard2_alert[m
[34mMon Oct 29 16:24:15 2012.200225 INFO Redis isnt reachable on/nsm/sensor_data/cfd-sosensor1-eth2/barnyard2_alert[m
[34mMon Oct 29 16:24:15 2012.200247 INFO Starting redis with config file /usr/local/etc/trisul/redis.conf[m
[34mMon Oct 29 16:24:17 2012.200734 INFO Started redis, retrying connect 2[m
[1;31mMon Oct 29 16:24:17 2012.200844 FATAL Unable to bring up redis after 2 attempts [m
[34mMon Oct 29 16:24:17 2012.200874 INFO Disable Redis in trisulConfig.xml and restart [m
[1;31mMon Oct 29 16:24:17 2012.200904 FATAL Redis support requested (<Redis><Enabled> param in config) but cant start [m
[34mMon Oct 29 16:24:17 2012.201042 INFO GLOBALFLUSH : at 12-31-1969 23:59:59--00001[m
[34mMon Oct 29 16:24:17 2012.202265 INFO Reusing newly inited slice - via cleanenv [m
[32mMon Oct 29 16:24:17 2012.202386 DEBUG Launching 2 flusher threads


This is what I get when I start Webtrisuld:

/etc/init.d/webtrisuld start
Starting webtrisul Daemon (webtrisuld): Starting Thin Daemon (thin): Starting server on /tmp/thin.webtrisul.0.sock ...
Starting server on /tmp/thin.webtrisul.1.sock ...
Starting server on /tmp/thin.webtrisul.2.sock ...
Starting server on /tmp/thin.webtrisul.3.sock ...
Starting server on /tmp/thin.webtrisul.4.sock ...
Starting Trisul Web Sockets Server no port 3003
Starting nginx Daemon (nginx): daemon /usr/local/share/webtrisul/sbin/nginx/sbin/nginx -c /usr/local/share/webtrisul/build/nginx.conf -p /usr/local/share/webtrisul/sbin/nginx/

Start Trisul:
/usr/local/share/trisul# /etc/init.d/trisul start
Starting trisul daemon:

I will keep looking in the Docs to see if I can find anything.

Thank you.