000030402 - How to manually install the unix utility "strace" to a Security Analytics Device

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000030402
Applies ToRSA Product Set: Security Analytics, NetWitness
Platform: CentOS
O/S Version: EL5, EL6
IssueStrace is a very useful operating system utility which can help isolate issues such as permissions, lock or ownership problems quickly.  While it is included on systems that are built from a Security Analytics 10.4 or higher buildstick, systems that have been upgraded to 10.4 may not contain the useful utility.  It is, however, quite easy to install and does not interfere with product or production related processes.  It can be installed at any given time on production systems without any advserse affects, providing the file system is not full.

The following method may be used to install strace depending on whether the target host has internet access or not.
1. Install the strace utility directly on the SA server which has access to smcupdates.emc.com:
            yum install strace
2. If the host has internet access, it can be installed by executing the following command directly from the Cent/OS vault:
rpm -ivf http:// http://vault.centos.org/6.0/updates/x86_64/RPMS/strace-4.5.19-1.10.el6.x86_64.rpm
3.  To manually add the strace utility to the SA server repository, the following steps can be used:

a. Download the strace utility to any local pc in the intranet that has sftp access the SA server by browsing to this url:
b. Save the rpm to a local directory, note the directory in which it was downloaded as it will be needed in step d
c. Add the the strace utility to the SA server repository by browsing to the Security Analytics UI, then click on
            Administration->System, then select "Updates"
d. Select the "Manual Updates" tab, select "Upload Files" then select the red "+"
e. Browse to the directory on your pc where the strace rpm was placed, select "Upload".
 f. Upon upload, the rpm is visibile in the repository, now click the checkbox directly next to the rpm,
 g. Important: now click the blue 
"Apply" box in the far lower left hand corner of the page.
         NOTE: failure to select apply will not post the rpm to the repository

4. Once the strace rpm is added to the repository, the rpm may be applied to any host that uses the SA Server as its repository by executing:

            yum install strace

NotesThe manpage for strace is bundled with the rpm, and contains usage information.