On Thu, May 5, 2016 at 2:12 PM, Jiri <necrosilenc...@gmail.com> wrote: > Hi, > > I just finished installing ossec on ubuntu as a server and windows agent on > another computer. How do i test if my agent is successfully connected to me? > Also, can someone help me on creating rules to detect an a ddos attack or > any attack on my server? >
On the server you can run `/var/ossec/bin/list_agents -c` to see the connected agents. Check out the rules that already exist in /var/ossec/rules. They should be useful as a template. If you still need help, please ask. > Thanks, > Regards. > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to ossec-list+unsubscr...@googlegroups.com. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
