Thank you rick. Btw Daniel changing open_attempts 8 to 80 did not solve my
problem. I will be waiting a fix.
I have a few hosts that use DHCP. The problem is if I add an agent with
a particular IP it's only good till the machine get's a new address. I
would prefer not to extend the lease or add the MAC addresses into DHCP
as some of the machines will move to different DHCP zones when
traveling.
Would
Hi !
I'm somewhat concerned about ARP spoofing on switched network, specially
because of
ettercap :
-
http://www.securitypronews.com/securitypronews-24-20030623EtterCapARPSpoofingandBeyond.html
- http://www.secuobs.com/news/04102006-ettercap.shtml (It's in french, I
didn't find someting
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
[EMAIL PROTECTED] wrote:
Hi !
I'm somewhat concerned about ARP spoofing on switched network, specially
because of
ettercap :
-
http://www.securitypronews.com/securitypronews-24-20030623EtterCapARPSpoofingandBeyond.html
-
Thank you for the response.
While it is not always over 60%, it is pretty much always over 40%. I
have been watching it for about a day, and it bounces around between 40%
and 75%.
I am running the agent on Windows Server 2003. Also, I did change the
syscheck interval to every 12 hours instead
Daniel -- Does it generate the checksum database every time it starts,
or only the first time?
Thanks
Rick
-Original Message-
From: ossec-list@googlegroups.com [mailto:[EMAIL PROTECTED]
On Behalf Of Daniel Cid
Sent: Thursday, October 05, 2006 8:52 PM
To: ossec-list@googlegroups.com
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Terry Morreale wrote:
Thank you for the response.
While it is not always over 60%, it is pretty much always over 40%. I
have been watching it for about a day, and it bounces around between 40%
and 75%.
I am running the agent on Windows
