After upgrade, packetcapture does not start on monitor.
Seen on 11.1.2:
In vontumonitor.log, a message such as the following appears:
STATUS | wrapper | 2011/12/02 12:11:54 | Launching a JVM...
INFO | jvm 1 | 2011/12/02 12:11:54 | WrapperManager: Initializing...
INFO | jvm 1 | 2011/12/02 12:12:14 | PC> /opt/Vontu/Protect/bin/PacketCapture: error while loading shared libraries: libPacketCapture-11.1.0.so: cannot open shared object file: No such file or directory
Jan 31, 2014 2:26:44 PM com.vontu.cracker.jni.JniLoader loadLibrary
INFO: Loading /opt/SymantecDLP/Protect/lib/native/libcontentextractionjni.so
Jan 31, 2014 2:26:44 PM com.vontu.messaging.FileReader main
SEVERE: (DETECTION.3) Failed to initialize Detection
java.lang.UnsatisfiedLinkError: /opt/SymantecDLP/Protect/lib/native/libcontentextractionjni-12.0.0.so: libboost_thread-gcc41-mt-1_48.so.1.48.0: cannot open shared object file: No such file or directory
Make sure you have run the following script as root:
from /opt/Vontu/Protect/install/<version>_Upgrade_Resources directory on the Enforce Server and to each detection server that you have upgraded.
This script does the following:
- On the Enforce Server, the script places the new Uninstaller in the correct directory.
- On a detection server, the script sets the correct permissions for packet capture. It also places the new Uninstaller in the correct directory, and it starts the VontuMonitor service.This per post_upgrade documentation for Linux installation.