On Sun, Aug 26, 2012 at 3:28 PM, Michael Starks
ossec-l...@michaelstarks.com wrote:
On 08/26/2012 03:16 AM, carlopmart wrote:
Hi all,
recntlly I have update two OSSEC servers to latest version stored in
bitbucket:
Glad to hear you are testing this. Just for the record, I don't think this
You need to add it to local_rules.xml
On Mon, Aug 27, 2012 at 5:15 AM, JJ Yu x86x...@gmail.com wrote:
I was write rule in ossec_rules.xml. but it is not effect. Please help~~~
as :
rule id=554 level=9
categoryossec/category
decoded_assyscheck_new_entry/decoded_as
Hi;
Trying to install ossec agent on an old aix 5.3.0 box w/gcc 4.1.1
installed. Compile seems to get most of the way through and chokes on
'making shared' in pthread.h:
make[1]: Entering directory `/db2/crash/ossec-hids-2.6/src/shared'
gcc -c -g -Wall -I../ -I../headers
Hi all,
Active response needs to be configured in server an agent to work?? I
am trying to activate for agents only, but doesn't seems to work ...
Do I need to configure in ossec.conf's server config file, in
agent.conf file or in both sides??
Thanks.
On Mon, Aug 27, 2012 at 1:45 PM, C. L. Martinez carlopm...@gmail.com wrote:
Hi all,
Active response needs to be configured in server an agent to work?? I
am trying to activate for agents only, but doesn't seems to work ...
Do I need to configure in ossec.conf's server config file, in
On Mon, Aug 27, 2012 at 5:55 PM, dan (ddp) ddp...@gmail.com wrote:
On Mon, Aug 27, 2012 at 1:45 PM, C. L. Martinez carlopm...@gmail.com wrote:
Hi all,
Active response needs to be configured in server an agent to work?? I
am trying to activate for agents only, but doesn't seems to work ...
On Mon, Aug 27, 2012 at 6:00 PM, dan (ddp) ddp...@gmail.com wrote:
On Mon, Aug 27, 2012 at 1:57 PM, C. L. Martinez carlopm...@gmail.com wrote:
On Mon, Aug 27, 2012 at 5:55 PM, dan (ddp) ddp...@gmail.com wrote:
On Mon, Aug 27, 2012 at 1:45 PM, C. L. Martinez carlopm...@gmail.com
wrote:
Hi
JB, That appears to have fixed the issue. Thanks a ton!
On Friday, August 24, 2012 5:52:03 PM UTC-7, JB wrote:
Try removing the OSSEC WAIT FILE: /var/ossec/queue/ossec/.wait
On Thursday, August 23, 2012 9:25:46 AM UTC-7, Tony Trummer wrote:
I'm trying to configure a new OSSEC
