Installed using metapackages, sudo sosetup states that no X display found. Why would this impact setup and how to fix?

Jeremy Roberts

unread,

Jul 31, 2017, 12:36:21 PM7/31/17

to security-onion

Installed using metapackages, sudo sosetup states that no X display found. Why would this impact setup and how to fix? It also states that Squil is not running and that ossec fails when i perform an nsm server status check

Wes Lambert

unread,

Jul 31, 2017, 1:51:28 PM7/31/17

to securit...@googlegroups.com

Jeremy,

If you are running without a GUI and do not forward X using a server like Xming, in conjunction with an SSH client like Putty (localhost:0.0), then you will need to run setup in a fashion as described here:

https://github.com/Security-Onion-Solutions/security-onion/wiki/Automating-Setup#starting-from-scratch

This would explain why the services you mentioned are not running (because you have yet to complete setup)

Thanks,

Wes

On Mon, Jul 31, 2017 at 12:36 PM, Jeremy Roberts <jerm...@gmail.com> wrote:

Installed using metapackages, sudo sosetup states that no X display found. Why would this impact setup and how to fix? It also states that Squil is not running and that ossec fails when i perform an nsm server status check

--
Follow Security Onion on Twitter!
https://twitter.com/securityonion
---
You received this message because you are subscribed to the Google Groups "security-onion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to security-onion+unsubscribe@googlegroups.com.
To post to this group, send email to security-onion@googlegroups.com.
Visit this group at https://groups.google.com/group/security-onion.
For more options, visit https://groups.google.com/d/optout.

Wes Lambert

unread,

Jul 31, 2017, 1:59:22 PM7/31/17

to securit...@googlegroups.com

Also see:

https://github.com/Security-Onion-Solutions/security-onion/wiki/ConnectingtoSguil#connect-remotely-via-ssh-w-x11-forwarding

Thanks,

Wes

On Mon, Jul 31, 2017 at 1:51 PM, Wes Lambert <wlamb...@gmail.com> wrote:

Jeremy,

If you are running without a GUI and do not forward X using a server like Xming, in conjunction with an SSH client like Putty (localhost:0.0), then you will need to run setup in a fashion as described here:

https://github.com/Security-Onion-Solutions/security-onion/wiki/Automating-Setup#starting-from-scratch

This would explain why the services you mentioned are not running (because you have yet to complete setup)

Thanks,
Wes

On Mon, Jul 31, 2017 at 12:36 PM, Jeremy Roberts <jerm...@gmail.com> wrote:

Installed using metapackages, sudo sosetup states that no X display found. Why would this impact setup and how to fix? It also states that Squil is not running and that ossec fails when i perform an nsm server status check

--
Follow Security Onion on Twitter!
https://twitter.com/securityonion
---
You received this message because you are subscribed to the Google Groups "security-onion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to security-onion+unsubscribe@googlegroups.com.

To post to this group, send email to securit...@googlegroups.com.

Jeremy Roberts

unread,

Jul 31, 2017, 2:37:49 PM7/31/17

to securit...@googlegroups.com

Wes,

How would i go about using the GUI? i tried using Moba xterm and still no dice. I was explicitly told to install it via meta packages as opposed to the distro and it seems like way more of a pain than if it was just done " the regular way". Should Xterm be the most likely solution? is there any configuration special for the ssh session?

You received this message because you are subscribed to a topic in the Google Groups "security-onion" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/security-onion/ceamp2XztVI/unsubscribe.
To unsubscribe from this group and all its topics, send an email to security-onion+unsubscribe@googlegroups.com.
To post to this group, send email to security-onion@googlegroups.com.

Wes Lambert

unread,

Jul 31, 2017, 3:03:05 PM7/31/17

to securit...@googlegroups.com

I've always used PuTTY, but any SSH client with X-forwarding support should work.

If you are using MobaXterm, you will want to make sure X11 Forwarding is checked in the SSH settings.

https://itekblog.com/ssh-x11-forwarding-display-using-mobaxterm/

If you are using PuTTY, for the session/connection for which you wish to enable X11:

-(In the left-hand pane) Expand "SSH"

-Click "X11"

-Check "Enable X11 forwarding"

-For X-display location, put "localhost:0.0"

-Make sure your changes are saved so you do not have to re-apply every time you connect.