pfSense Support Subscription

Author Topic: IMSpector upgrade  (Read 7185 times)

0 Members and 1 Guest are viewing this topic.

Offline samba

  • Newbie
  • *
  • Posts: 7
  • Karma: +0/-0
    • View Profile
IMSpector upgrade
« on: June 25, 2011, 10:59:33 am »
Hi could some one advise me on how too upgrade imspector to the latest snapshot. The current package seems not too be logging  live messenger 2010 but it is logging the older versions fine. This is apparently corrected in a snapshot after 27-10-2010

Thanks

Offline johnnybe

  • Hero Member
  • *****
  • Posts: 1395
  • Karma: +0/-0
  • I've got... a head with wings
    • View Profile
    • nextsense blog
Re: IMSpector upgrade
« Reply #1 on: June 25, 2011, 12:34:22 pm »
Same here with live messenger 2011 and ICQ 7.2.
Running 2.0-RC3 (i386) built on Tue Jun 21 17:40:54 EDT 2011
And doesn't mind what settings applied, after 3 or 5 minutes the messenger disconnects, ICQ doesn't.
« Last Edit: June 25, 2011, 12:38:41 pm by johnnybe »
you would not believe the view up here

Offline samba

  • Newbie
  • *
  • Posts: 7
  • Karma: +0/-0
    • View Profile
Re: IMSpector upgrade
« Reply #2 on: June 25, 2011, 01:04:50 pm »
Hi yea I just upgraded my pfsense upto 2.0-RC3 i386 and reinstalled inspector too see if it helped but it seems the same.

Offline johnnybe

  • Hero Member
  • *****
  • Posts: 1395
  • Karma: +0/-0
  • I've got... a head with wings
    • View Profile
    • nextsense blog
Re: IMSpector upgrade
« Reply #3 on: June 25, 2011, 01:19:29 pm »
Maybe a proxy problem?
I have HAVP parent for Squid. Squid is running as transparent proxy. Snort is installed without any chat filter rule.
Imspector was the last package installed.
you would not believe the view up here

Offline jimp

  • Administrator
  • Hero Member
  • *****
  • Posts: 14976
  • Karma: +4/-0
    • View Profile
Re: IMSpector upgrade
« Reply #4 on: June 28, 2011, 08:55:10 am »
IMspector is getting updated, but the developer working on the updated package is away at the moment. There is an updated package on amd64 (imspector-wip) but it's a work-in-progress.
Need help fast? Commercial Support!

Co-Author of pfSense: The Definitive Guide. - Check the Doc Wiki for FAQs.

Do not PM for help!

Offline billm

  • Administrator
  • Hero Member
  • *****
  • Posts: 731
  • Karma: +1/-0
    • View Profile
    • UCSecurity - Technology discovery and ramblings
Re: IMSpector upgrade
« Reply #5 on: July 22, 2011, 10:49:30 am »
As jim-p notes, there is an AMD64 package of IMspector 0.9 for 2.0 in the repos currently.  I'll get an i386 build out today if at all possible (I think it just needs the master repo package file updated).  Summary of my testing:

protocollogsnotice of loggingcontent filteringnotes
jabberYesYesYes
jabber-ssl/gtalkYesYesYesApple iOS Push notifications break due to man-in-the-middle cert
Yahoo IMYesNoMaybeYahoo appears to disconnect the client when IMspector changes/injects content
MSNUntestedUntestedUntestedNo MSN account to test with
Gadu GaduUntestedUntestedUntestedNo Gadu-Gadu account to test with
IRCYesNoYesIMspector appears to be able to change/filter content, but not to inject it

--Bill
pfSense core developer
blog - http://www.ucsecurity.com/
twitter - billmarquette

Offline rafael.cardoso

  • Sr. Member
  • ****
  • Posts: 317
  • Karma: +0/-0
    • View Profile
Re: IMSpector upgrade
« Reply #6 on: July 25, 2011, 07:34:31 am »
How many users look forward to this update, but just installed the mute button to save the setting, another question how can I help improve this package
Respect is Everything!

Offline billm

  • Administrator
  • Hero Member
  • *****
  • Posts: 731
  • Karma: +1/-0
    • View Profile
    • UCSecurity - Technology discovery and ramblings
Re: IMSpector upgrade
« Reply #7 on: July 25, 2011, 11:18:17 am »
I'm sorry, I don't understand what you are trying to say.  There is now an i386 package available for 2.0.  Please test, if all looks good, I'd like to replace the 0.8 package with this.  Thanks

--Bill
pfSense core developer
blog - http://www.ucsecurity.com/
twitter - billmarquette

Offline Cino

  • Hero Member
  • *****
  • Posts: 1051
  • Karma: +0/-0
    • View Profile
Re: IMSpector upgrade
« Reply #8 on: July 25, 2011, 11:52:11 am »
I'm sorry, I don't understand what you are trying to say.  There is now an i386 package available for 2.0.  Please test, if all looks good, I'd like to replace the 0.8 package with this.  Thanks

--Bill

I think he was trying to say is there is no save button. I installed it last night and noticed I there was no save button. I will be able to confirm MSN once its up and running.

Offline rafael.cardoso

  • Sr. Member
  • ****
  • Posts: 317
  • Karma: +0/-0
    • View Profile
Re: IMSpector upgrade
« Reply #9 on: July 25, 2011, 02:50:43 pm »
Apologies billm, but it's true, the button does not appear to save

Is there any way to help you?
Respect is Everything!

Offline n1ko

  • Jr. Member
  • **
  • Posts: 75
  • Karma: +0/-0
    • View Profile
Re: IMSpector upgrade
« Reply #10 on: July 26, 2011, 10:18:06 am »
Yeah the save-button is definetly missing, but it also doesnt log to file (atleast not msn). Dont have time to test other protocols just now,but i would guess its the same for others. In debug mode it doesnt catch it all so the problem lies in saving it to file. Configuration ok so its not that. Also tried deleting the previous /var/imspector and letting the package generate it but no dice.

Im on 2.0 i386

Offline billm

  • Administrator
  • Hero Member
  • *****
  • Posts: 731
  • Karma: +1/-0
    • View Profile
    • UCSecurity - Technology discovery and ramblings
Re: IMSpector upgrade
« Reply #11 on: July 26, 2011, 01:35:43 pm »
Hmm, I'll recheck that when I get home, but I absolutely had a save button on my test system! :-/  Wonder if I managed to break the xml when I pushed it.

--Bill
pfSense core developer
blog - http://www.ucsecurity.com/
twitter - billmarquette

Offline billm

  • Administrator
  • Hero Member
  • *****
  • Posts: 731
  • Karma: +1/-0
    • View Profile
    • UCSecurity - Technology discovery and ramblings
Re: IMSpector upgrade
« Reply #12 on: July 27, 2011, 07:46:41 am »
Scroll to the bottom of the page - there's a 'Change' button there (at least for me).  I haven't had the time to determine if this can be moved or renamed, but it's what I used for all my testing.  If you didn't save the settings via the package screen, there will be no logging because pfSense won't pass traffic to IMSpector (I'm assuming this was launched manually, from the command line).

--Bill
pfSense core developer
blog - http://www.ucsecurity.com/
twitter - billmarquette

Offline Cino

  • Hero Member
  • *****
  • Posts: 1051
  • Karma: +0/-0
    • View Profile
Re: IMSpector upgrade
« Reply #13 on: July 28, 2011, 09:06:59 am »
Seems to be a package missing for IMSpector-WIP:

   Downloading http://files.pfsense.org/packages/8/All/mysql-client-5.5.14.tbz ...  could not download from there or http://ftp2.FreeBSD.org/pub/FreeBSD/ports/i386/packages-8.1-release/All/mysql-client-5.5.14.tbz.
of imspector-0.9 failed!

Offline HaDDeR

  • Newbie
  • *
  • Posts: 4
  • Karma: +0/-0
    • View Profile
Re: IMSpector upgrade
« Reply #14 on: July 29, 2011, 06:57:13 am »