Re: [ossec-list] Re: AnaLogi - OSSEC WUI v1.2

2012-08-07 Thread Frank Stefan Sundberg Solli
3) What I was thinking was more of a drop down menu of all Rule IDS', that way you dont need to know the Rule ID for the alert you want to look for. (This will allow people not familiar with the internals of ossec to search for relevant log entries) On Tue, Aug 7, 2012 at 2:44 PM,

Re: [ossec-list] Re: AnaLogi - OSSEC WUI v1.2

2012-08-07 Thread techsupp...@ecsc.co.uk
Sorry, to clarify, are you referring to a specific location, or everywhere? On Tuesday, August 7, 2012 2:15:57 PM UTC+1, Frank Stefan wrote: 3) What I was thinking was more of a drop down menu of all Rule IDS', that way you dont need to know the Rule ID for the alert you want to look for.

Re: [ossec-list] Can OSSEC 2.6 support SHA-256 or SHA-512 algorithms?

2012-08-07 Thread dan (ddp)
On Tue, Aug 7, 2012 at 12:10 PM, Diezou secur...@diezou.net wrote: Hello, Can OSSEC 2.6 support SHA-256 or SHA-512 algorithms? If not (that I think after docs reading), I'd like to know if these algorithms act as a part of future roadmap? Thanks No, and not really.

Re: [ossec-list] Can OSSEC 2.6 support SHA-256 or SHA-512 algorithms?

2012-08-07 Thread Wei Zhang
Is there a place for feature request? +1 for SHA-256 or SHA512 On Tue, Aug 7, 2012 at 12:13 PM, dan (ddp) ddp...@gmail.com wrote: On Tue, Aug 7, 2012 at 12:10 PM, Diezou secur...@diezou.net wrote: Hello, Can OSSEC 2.6 support SHA-256 or SHA-512 algorithms? If not (that I think after docs

[ossec-list] ignore interval but...

2012-08-07 Thread Kat
Ok, here is a tricky one I can't figure out.. I have a simple rule with an ignore=7200 so it does not fire too much. BUT, what if I only want to set the ignore PER HOST? In other words, if it triggers on another host it should alert then set the ignore timer. Yeah, I am not aware of a