Re: [ossec-list] Anti replay feature

Most cases it does, when all counters are synced. If you loose server counters it won't, that is why I was saying to change that config in the agent too. In any case I am glad it worked for what you needed. Best regards On Wed, May 4, 2016 at 2:26 AM, Zekicker wrote: >

Re: [ossec-list] Anti replay feature

For information, I tried to change the option in /var/ossec/etc/internal_options.conf only for the OSSEC server. It works without changing it for the agents. Le mardi 3 mai 2016 20:19:52 UTC+2, Zekicker a écrit : > > Thanks to you two !!! > > :) > > > Le mardi 3 mai 2016 17:15:08 UTC+2,

Re: [ossec-list] Anti replay feature

Thanks to you two !!! :) Le mardi 3 mai 2016 17:15:08 UTC+2, Santiago Bassett a écrit : > > Yes, and on the agents too. I know the agents do not run remoted but they > also use this variable to check counters. > > Santiago Bassett > @santiagobassett > > > On May 3, 2016, at 7:36 AM, dan

Re: [ossec-list] Anti replay feature

Yes, and on the agents too. I know the agents do not run remoted but they also use this variable to check counters. Santiago Bassett @santiagobassett > On May 3, 2016, at 7:36 AM, dan (ddp) wrote: > >> On Tue, May 3, 2016 at 10:26 AM, Zekicker wrote: >>

Re: [ossec-list] Anti replay feature

On Tue, May 3, 2016 at 10:26 AM, Zekicker wrote: > Hi, > > Is it possible to disable the anti-replay feature of OSSEC ? > > I need to deploy and delete some VMs on demand. All must be automatic. > > Do you have an idea to di it simple ? > I believe you can set

[ossec-list] Anti replay feature

Hi, Is it possible to disable the anti-replay feature of OSSEC ? I need to deploy and delete some VMs on demand. All must be automatic. Do you have an idea to di it simple ? regards, -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To