technet12:/usr/local/bin/sguil/server # ./sguild -c /usr/local/etc/nsm/sguild.conf -u sguild.users -O /usr/local/lib/libtls.so.1 pid(4885) Loading access list: ./sguild.access pid(4885) Sensor access list set to ALLOW ANY. pid(4885) Client access list set to ALLOW ANY. pid(4885) Email Configuration: pid(4885) Config file: ./sguild.email pid(4885) Enabled: No pid(4885) Connecting to 172.21.9.252 on 3306 as sguil pid(4885) MySQL Version: version 5.0.18 pid(4885) SguilDB Version: 0.11 pid(4885) Creating event MERGE table. pid(4885) Creating tcphdr MERGE table. pid(4885) Creating udphdr MERGE table. pid(4885) Creating icmphdr MERGE table. pid(4885) Creating data MERGE table. pid(4888) Loaderd Forked pid(4889) Queryd Forked pid(4885) Retrieving DB info... pid(4885) SELECT hostname FROM sensor ORDER BY hostname ASC pid(4885) SELECT sid FROM sensor WHERE hostname='nsmabd' pid(4885) SELECT ip FROM sensor WHERE hostname='nsmabd' pid(4885) SELECT MAX(timestamp) FROM event WHERE sid=4 pid(4885) SELECT sid FROM sensor WHERE hostname='nsmdal' pid(4885) SELECT ip FROM sensor WHERE hostname='nsmdal' pid(4885) SELECT MAX(timestamp) FROM event WHERE sid=1 pid(4885) SELECT sid FROM sensor WHERE hostname='nsmdmz' pid(4885) SELECT ip FROM sensor WHERE hostname='nsmdmz' pid(4885) SELECT MAX(timestamp) FROM event WHERE sid=3 pid(4885) SELECT sid FROM sensor WHERE hostname='nsmlms' pid(4885) SELECT ip FROM sensor WHERE hostname='nsmlms' pid(4885) SELECT MAX(timestamp) FROM event WHERE sid=6 pid(4885) SELECT sid FROM sensor WHERE hostname='nsmlou' pid(4885) SELECT ip FROM sensor WHERE hostname='nsmlou' pid(4885) SELECT MAX(timestamp) FROM event WHERE sid=2 pid(4885) SELECT sid FROM sensor WHERE hostname='nsmlpm' pid(4885) SELECT ip FROM sensor WHERE hostname='nsmlpm' pid(4885) SELECT MAX(timestamp) FROM event WHERE sid=8 pid(4885) SELECT sid FROM sensor WHERE hostname='nsmlvn' pid(4885) SELECT ip FROM sensor WHERE hostname='nsmlvn' pid(4885) SELECT MAX(timestamp) FROM event WHERE sid=7 pid(4885) SELECT sid FROM sensor WHERE hostname='nsmtech' pid(4885) SELECT ip FROM sensor WHERE hostname='nsmtech' pid(4885) SELECT MAX(timestamp) FROM event WHERE sid=5 pid(4885) Querying DB for archived events... mysqlsel/db server: Can't create/write to file '/var/lib/mysql/tmp/MY1wkoJ3' (Errcode: 13) while executing "mysqlsel $MAIN_DB_SOCKETID $tmpQry -list" invoked from within "if { $mergeTableListArray(event) != "" } { # Get the archived alerts LogMessage "Querying DB for archived events..." set MAJOR_MYSQL_VERS..." (file "./sguild" line 555) pid(4888) Unknown command received from sguild: