I have an OSSEC client and server. Both of them have connectivity, and the agent is sending alerts to the server when, for example, and FTP attack is detected.
While performing several tests (sniffing traffic), I've seen that the agent sends alerts to the server when a web attack is detected, but the server never sends the corresponding email, and the alert is not recorded on the server's log. Can anyone please help me? -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/groups/opt_out.
