<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Dear hatibu,</p>
<p>IntelMQ is currently using a pid-file based approach (without
file locking) to determine of bots are running. Unfortunately,
that is error-prone to behaviors like the one you are experiencing
just now. If the bots are actually not running (check with
ps/top/htop), you can remove the dangling PID files manually. They
are in `/var/run/intelmq/` or `/opt/intelmq/var/run/`, depending
on your installation.</p>
<p>If someone is encourage to work on this, here's some more
context:<br>
- <a class="moz-txt-link-freetext" href="https://github.com/certtools/intelmq/issues/1552">https://github.com/certtools/intelmq/issues/1552</a><br>
- <a class="moz-txt-link-freetext" href="https://github.com/certtools/intelmq/issues/1569">https://github.com/certtools/intelmq/issues/1569</a></p>
<p>HTH<br>
Sebastian<br>
</p>
<div class="moz-cite-prefix">On 4/29/21 10:08 AM, hatibu chande
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CA+i4mZ3-PumGC8MjmHGKMQbEj0nDp7UN1tR2cVu=mLOr7Go_-Q@mail.gmail.com">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<div dir="ltr">Hello Team,
<div><br>
</div>
<div>I recently installed inetlmq and configured shadowsever API
bot collector with shadowserverAPI parser, Cymru-Whois-Expert
and File-Output but i got this error when running.</div>
<div><br>
</div>
<div>Starting Botnet...<br>
Starting Cymru-Whois-Expert...<br>
Starting File-Output...<br>
Starting Shadowserver-JSON-Parser...<br>
Starting Shadowserver-Reports-API-Collector...<br>
Status of Bot Cymru-Whois-Expert is unknown: 'Unhandled error
checking the process 18850 with commandline [].'.<br>
Cymru-Whois-Expert unknown<br>
Status of Bot File-Output is unknown: 'Unhandled error
checking the process 18851 with commandline [].'.<br>
File-Output unknown<br>
Status of Bot Shadowserver-JSON-Parser is unknown: 'Unhandled
error checking the process 18852 with commandline [].'.<br>
Shadowserver-JSON-Parser unknown<br>
Status of Bot Shadowserver-Reports-API-Collector is unknown:
'Unhandled error checking the process 18853 with commandline
[].'.<br>
Shadowserver-Reports-API-Collector unknown<br>
Bot Botnet is running.<br>
</div>
<div><br>
</div>
<div>Can anyone help me please.</div>
<div><br>
</div>
<div>Regards,</div>
<div>Hatibu.</div>
<div><br>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
</blockquote>
<pre class="moz-signature" cols="72">--
// Sebastian Wagner <a class="moz-txt-link-rfc2396E" href="mailto:wagner@cert.at"><wagner@cert.at></a> - T: +43 676 898 298 7201
// CERT Austria - <a class="moz-txt-link-freetext" href="https://www.cert.at/">https://www.cert.at/</a>
// Eine Initiative der nic.at GmbH - <a class="moz-txt-link-freetext" href="https://www.nic.at/">https://www.nic.at/</a>
// Firmenbuchnummer 172568b, LG Salzburg</pre>
</body>
</html>