Greetings Daniel:
I tried copying just the decoder section from the snapshot to the
decoder (removing the one that was present so there would be no
duplicates)...
yet when I restart ossec it will not restart.
!-- SonicWall decoder.
- Will extract action, srcip, dstip, protocol, srcport and
Greetings:
I created a small number of sonicwall rules in /var/ossec/rules/
local_rules.xml
When I restarted ossec, it told me there was no sonicwall decoder.
When I commented out the decoder section for sonicwall in /var/ossec/
etc/decoder.xml I was told there is an error in the sonicwall
Hi DM,
Please give us more information to debug/reproduce your issue. What happens
if you do a service ossec restart? Anything else in the logs besides
these messages?
Most of the time, we need at least the following information:
http://www.ossec.net/wiki/index.php/Community_manual:BugReport
