Hi Daniel:
Done, and works like a charm.
Thank you.
Greetings Daniel:
Thank you for this help, and your regular and timely help for ossec
I'm not able to change the formatting at present; we use Bastille for
Linux, and I'm not sure (at present) what hacking I can get away with
in that area.
What would I change in the decode to support multiple
Greetings Daniel:
Thank you for this help, and your regular and timely help for ossec
I'm not able to change the formatting at present; we use Bastille for
Linux, and I'm not sure (at present) what hacking I can get away with
in that area.
What would I change in the decode to support multiple
Hi Peter,
This should be very easy to do. If you can show us a few log samples,
I can start a few rules
for you...
Thanks,
--
Daniel B. Cid
dcid ( at ) ossec.net
On Nov 22, 2007 7:07 PM, Peter M. Abraham [EMAIL PROTECTED] wrote:
Greetings:
We use http://kodu.neti.ee/~risto/sec/ for real