[ossec-list] Re: Help with converting sec rules to ossec rules

2007-12-04 Thread Peter M. Abraham
Hi Daniel: Done, and works like a charm. Thank you.

[ossec-list] Re: Help with converting sec rules to ossec rules

2007-12-03 Thread Peter M. Abraham
Greetings Daniel: Thank you for this help, and your regular and timely help for ossec I'm not able to change the formatting at present; we use Bastille for Linux, and I'm not sure (at present) what hacking I can get away with in that area. What would I change in the decode to support multiple

[ossec-list] Re: Help with converting sec rules to ossec rules

2007-11-30 Thread Peter M. Abraham
Greetings Daniel: Thank you for this help, and your regular and timely help for ossec I'm not able to change the formatting at present; we use Bastille for Linux, and I'm not sure (at present) what hacking I can get away with in that area. What would I change in the decode to support multiple

[ossec-list] Re: Help with converting sec rules to ossec rules

2007-11-26 Thread Daniel Cid
Hi Peter, This should be very easy to do. If you can show us a few log samples, I can start a few rules for you... Thanks, -- Daniel B. Cid dcid ( at ) ossec.net On Nov 22, 2007 7:07 PM, Peter M. Abraham [EMAIL PROTECTED] wrote: Greetings: We use http://kodu.neti.ee/~risto/sec/ for real