Hi Barbaros, I remember that someone in the past sent me a script to remove ossec, but I never got around to integrate it with ossec (whosoever did it, please send to me again).
Anyway, the easiest way to remove ossec is to do the following: -Remove /var/ossec -Remove the init script (generally /etc/init.d/ossec and all the references on /etc/rc.X) -Remove all the ossec users -Remove /etc/ossec-init.conf Hope it helps. -- Daniel B. Cid dcid ( at ) ossec.net On 7/21/07, Barbaros Usekes <[EMAIL PROTECTED]> wrote: > Hello, > > I installed ossec to my server yesterday, for trying it and now i want to > remove it but i dont know how to do it. I am a newbie. > > I just deleted ossec files and folders, and when my server starts it tries > to start ossec also and it gives error as : > > Starting OSSEC: /etc/init.d/ossec: line 36: /var/ossec/bin/ossec-control: No > such file or directory > > This error is because i deleted most (i thought i deleted all) files and > folders of ossec, but it seems not. > > I guess i need to also remove /etc/init.d/ossec. > > Am i doing things right or is there a different removal method? >