RE: [ossec-list] Question about active response

2012-08-28 Thread Michael D. Wood
ITSecurityPros.org www.itsecuritypros.org -Original Message- From: ossec-list@googlegroups.com [mailto:ossec-list@googlegroups.com] On Behalf Of C. L. Martinez Sent: Monday, August 27, 2012 1:57 PM To: ossec-list@googlegroups.com Subject: Re: [ossec-list] Question about active response On Mon, Aug

[ossec-list] Question about active response

2012-08-27 Thread C. L. Martinez
Hi all, Active response needs to be configured in server an agent to work?? I am trying to activate for agents only, but doesn't seems to work ... Do I need to configure in ossec.conf's server config file, in agent.conf file or in both sides?? Thanks.

Re: [ossec-list] Question about active response

2012-08-27 Thread dan (ddp)
On Mon, Aug 27, 2012 at 1:45 PM, C. L. Martinez carlopm...@gmail.com wrote: Hi all, Active response needs to be configured in server an agent to work?? I am trying to activate for agents only, but doesn't seems to work ... Do I need to configure in ossec.conf's server config file, in

Re: [ossec-list] Question about active response

2012-08-27 Thread C. L. Martinez
On Mon, Aug 27, 2012 at 5:55 PM, dan (ddp) ddp...@gmail.com wrote: On Mon, Aug 27, 2012 at 1:45 PM, C. L. Martinez carlopm...@gmail.com wrote: Hi all, Active response needs to be configured in server an agent to work?? I am trying to activate for agents only, but doesn't seems to work ...

Re: [ossec-list] Question about active response

2012-08-27 Thread C. L. Martinez
On Mon, Aug 27, 2012 at 6:00 PM, dan (ddp) ddp...@gmail.com wrote: On Mon, Aug 27, 2012 at 1:57 PM, C. L. Martinez carlopm...@gmail.com wrote: On Mon, Aug 27, 2012 at 5:55 PM, dan (ddp) ddp...@gmail.com wrote: On Mon, Aug 27, 2012 at 1:45 PM, C. L. Martinez carlopm...@gmail.com wrote: Hi