After Linux upgrade, packetcapture fails to start with missing file

book

Article ID: 160302

calendar_today

Updated On:

Products

Data Loss Prevention Network Monitor Data Loss Prevention Enforce Data Loss Prevention

Issue/Introduction

After upgrade, packetcapture does not start on monitor.

Seen on 11.1.2:

In vontumonitor.log, a message such as the following appears:

STATUS | wrapper  | 2011/12/02 12:11:54 | Launching a JVM...
INFO   | jvm 1    | 2011/12/02 12:11:54 | WrapperManager: Initializing...
INFO   | jvm 1    | 2011/12/02 12:12:14 | PC> /opt/Vontu/Protect/bin/PacketCapture: error while loading shared libraries: libPacketCapture-11.1.0.so: cannot open shared object file: No such file or directory

And on 12.0 (monitor Filereader.log) :

Jan 31, 2014 2:26:44 PM com.vontu.cracker.jni.JniLoader loadLibrary
INFO: Loading /opt/SymantecDLP/Protect/lib/native/libcontentextractionjni.so
Jan 31, 2014 2:26:44 PM com.vontu.messaging.FileReader main
SEVERE: (DETECTION.3) Failed to initialize Detection
java.lang.UnsatisfiedLinkError: /opt/SymantecDLP/Protect/lib/native/libcontentextractionjni-12.0.0.so: libboost_thread-gcc41-mt-1_48.so.1.48.0: cannot open shared object file: No such file or directory

Resolution

Make sure you have run the following script as root:

./<version>_upgrade_root_script.sh

from /opt/Vontu/Protect/install/<version>_Upgrade_Resources directory on the Enforce Server and to each detection server that you have upgraded.

This script does the following:

- On the Enforce Server, the script places the new Uninstaller in the correct directory.

- On a detection server, the script sets the correct permissions for packet capture. It also places the new Uninstaller in the correct directory, and it starts the VontuMonitor service.

This per post_upgrade documentation for Linux installation.