Hi Trevor,
Thanks for the report. It has been fixed on the latest snapshot:
http://www.ossec.net/files/snapshots/ossec-hids-100324.tar.gz
--
Daniel B. Cid
dcid ( at ) ossec.net
On Mon, Mar 22, 2010 at 7:59 PM, tm trevor.a.b.mcl...@gmail.com wrote:
Hello,
I am using OSSEC 2.3. The first part
Hello,
I am using OSSEC 2.3. The first part of the smbd_rules.xml file looks
like this:
rule id=13100 level=0 noalert=1
match^smbd/match
descriptionGrouping for the smbd rules./description
/rule
It should be:
rule id=13100 level=0 noalert=1
decoded_assmbd/decoded_as