On Thu, Oct 21, 2010 at 2:01 PM, <ko...@mnr.org> wrote: > Anyone: After upgrading my management Servers to 2.5.1 I'm getting, after I > restart the agents > > 2010/10/21 13:56:04 ossec-testrule: INFO: Reading local decoder file. > > Any information on this would be great. > Thank You Christian
This is normal. There are now options to use more decoder files (other than just decoder.xml/local_decoder.xml), and loading entire directories of decoders. http://www.ossec.net/doc/manual/rules-decoders/rule_decoder_dir.html