Re: [ossec-list] Qustios about how OSSEC works. Q1 is the time displayed by syscheck_control, Q2 is OSSEC able to detect change using cp -p option?

2012-07-17 Thread Marcos Tang
Hi Dan, Thanks. Regards, Marcos On Tue, Jul 10, 2012 at 10:12 PM, dan (ddp) ddp...@gmail.com wrote: On Sat, Jun 30, 2012 at 2:02 PM, Marcos Tang marcostang2...@yahoo.com wrote: Hi, I have 2 questions about OSSEC and I want to know your answer. Today, the syscheck_control -i 125 -f

Re: [ossec-list] Qustios about how OSSEC works. Q1 is the time displayed by syscheck_control, Q2 is OSSEC able to detect change using cp -p option?

2012-07-10 Thread dan (ddp)
On Sat, Jun 30, 2012 at 2:02 PM, Marcos Tang marcostang2...@yahoo.com wrote: Hi, I have 2 questions about OSSEC and I want to know your answer. Today, the syscheck_control -i 125 -f /usr/local/bin/test1 shows the following results (See background information section below). Scrolling to

[ossec-list] Qustios about how OSSEC works. Q1 is the time displayed by syscheck_control, Q2 is OSSEC able to detect change using cp -p option?

2012-06-30 Thread Marcos Tang
Hi, I have 2 questions about OSSEC and I want to know your answer. Today, the syscheck_control -i 125 -f /usr/local/bin/test1 shows the following results (See background information section below). My understanding to the syscheck_conrol output is (a) this file is initially added to the