Re: [ossec-list] Re: Problem with active response in 2.7

2012-12-20 Thread dan (ddp)
On Thu, Dec 13, 2012 at 10:04 AM, C. L. Martinez carlopm...@gmail.com wrote: On Thu, Dec 13, 2012 at 2:43 PM, dan (ddp) ddp...@gmail.com wrote: On Wed, Dec 12, 2012 at 6:13 AM, C. L. Martinez carlopm...@gmail.com wrote: On Wed, Dec 12, 2012 at 11:01 AM, dan (ddp) ddp...@gmail.com wrote: So I

Re: [ossec-list] Re: Problem with active response in 2.7

2012-12-20 Thread C. L. Martinez
On Thu, Dec 20, 2012 at 1:37 PM, dan (ddp) ddp...@gmail.com wrote: On Thu, Dec 13, 2012 at 10:04 AM, C. L. Martinez carlopm...@gmail.com wrote: On Thu, Dec 13, 2012 at 2:43 PM, dan (ddp) ddp...@gmail.com wrote: On Wed, Dec 12, 2012 at 6:13 AM, C. L. Martinez carlopm...@gmail.com wrote: On

Re: [ossec-list] Re: Problem with active response in 2.7

2012-12-13 Thread dan (ddp)
On Wed, Dec 12, 2012 at 6:13 AM, C. L. Martinez carlopm...@gmail.com wrote: On Wed, Dec 12, 2012 at 11:01 AM, dan (ddp) ddp...@gmail.com wrote: So I don't have to dig through the whining to find out: Did you check permissions? Perhaps of ar.conf? Yes. In ossec server: [root] ls -al total

Re: [ossec-list] Re: Problem with active response in 2.7

2012-12-13 Thread C. L. Martinez
On Thu, Dec 13, 2012 at 2:43 PM, dan (ddp) ddp...@gmail.com wrote: On Wed, Dec 12, 2012 at 6:13 AM, C. L. Martinez carlopm...@gmail.com wrote: On Wed, Dec 12, 2012 at 11:01 AM, dan (ddp) ddp...@gmail.com wrote: So I don't have to dig through the whining to find out: Did you check permissions?

Re: [ossec-list] Re: Problem with active response in 2.7

2012-12-12 Thread C. L. Martinez
On Wed, Dec 12, 2012 at 7:38 AM, dan (ddp) ddp...@gmail.com wrote: On Dec 12, 2012 2:36 AM, C. L. Martinez carlopm...@gmail.com wrote: On Tue, Dec 11, 2012 at 6:47 AM, C. L. Martinez carlopm...@gmail.com wrote: On Mon, Dec 10, 2012 at 9:46 PM, Brenden Walker bren...@unruleable.org wrote:

Re: [ossec-list] Re: Problem with active response in 2.7

2012-12-12 Thread dan (ddp)
On Dec 12, 2012 5:48 AM, C. L. Martinez carlopm...@gmail.com wrote: On Wed, Dec 12, 2012 at 7:38 AM, dan (ddp) ddp...@gmail.com wrote: On Dec 12, 2012 2:36 AM, C. L. Martinez carlopm...@gmail.com wrote: On Tue, Dec 11, 2012 at 6:47 AM, C. L. Martinez carlopm...@gmail.com wrote: On

Re: [ossec-list] Re: Problem with active response in 2.7

2012-12-12 Thread C. L. Martinez
On Wed, Dec 12, 2012 at 11:01 AM, dan (ddp) ddp...@gmail.com wrote: On Dec 12, 2012 5:48 AM, C. L. Martinez carlopm...@gmail.com wrote: On Wed, Dec 12, 2012 at 7:38 AM, dan (ddp) ddp...@gmail.com wrote: On Dec 12, 2012 2:36 AM, C. L. Martinez carlopm...@gmail.com wrote: On Tue, Dec 11,

Re: [ossec-list] Re: Problem with active response in 2.7

2012-12-11 Thread C. L. Martinez
On Mon, Dec 10, 2012 at 9:46 PM, Brenden Walker bren...@unruleable.org wrote: On Mon, 10 Dec 2012 13:15:50 -0800 (PST) Guilmxm guilhem.march...@gmail.com wrote: Hi, I had the same issue with Ossec 2.7 even with a server / agent fresh install, i confirm. Regards, Guilhem Weird, it's

Re: [ossec-list] Re: Problem with active response in 2.7

2012-12-11 Thread C. L. Martinez
On Tue, Dec 11, 2012 at 6:47 AM, C. L. Martinez carlopm...@gmail.com wrote: On Mon, Dec 10, 2012 at 9:46 PM, Brenden Walker bren...@unruleable.org wrote: On Mon, 10 Dec 2012 13:15:50 -0800 (PST) Guilmxm guilhem.march...@gmail.com wrote: Hi, I had the same issue with Ossec 2.7 even with a

Re: [ossec-list] Re: Problem with active response in 2.7

2012-12-11 Thread dan (ddp)
On Dec 12, 2012 2:36 AM, C. L. Martinez carlopm...@gmail.com wrote: On Tue, Dec 11, 2012 at 6:47 AM, C. L. Martinez carlopm...@gmail.com wrote: On Mon, Dec 10, 2012 at 9:46 PM, Brenden Walker bren...@unruleable.org wrote: On Mon, 10 Dec 2012 13:15:50 -0800 (PST) Guilmxm

[ossec-list] Re: Problem with active response in 2.7

2012-12-10 Thread C. L. Martinez
On Mon, Dec 10, 2012 at 10:31 AM, C. L. Martinez carlopm...@gmail.com wrote: Hi all, I am using same active response options in one 2.6 ossec server and in another 2.7 ossec server. In version 2.6 all works ok as I expect, but under 2.7 it doesn't works. In both servers I have configured

[ossec-list] Re: Problem with active response in 2.7

2012-12-10 Thread C. L. Martinez
On Mon, Dec 10, 2012 at 10:49 AM, C. L. Martinez carlopm...@gmail.com wrote: On Mon, Dec 10, 2012 at 10:31 AM, C. L. Martinez carlopm...@gmail.com wrote: Hi all, I am using same active response options in one 2.6 ossec server and in another 2.7 ossec server. In version 2.6 all works ok as I

[ossec-list] Re: Problem with active response in 2.7

2012-12-10 Thread Guilmxm
Hi, I had the same issue with Ossec 2.7 even with a server / agent fresh install, i confirm. Regards, Guilhem Le lundi 10 décembre 2012 12:00:30 UTC+1, carlopmart a écrit : On Mon, Dec 10, 2012 at 10:49 AM, C. L. Martinez carlo...@gmail.comjavascript: wrote: On Mon, Dec 10, 2012 at

Re: [ossec-list] Re: Problem with active response in 2.7

2012-12-10 Thread Brenden Walker
On Mon, 10 Dec 2012 13:15:50 -0800 (PST) Guilmxm guilhem.march...@gmail.com wrote: Hi, I had the same issue with Ossec 2.7 even with a server / agent fresh install, i confirm. Regards, Guilhem Weird, it's working fine in 2.7 for me. OSSEC HIDS agent_control. Available active

[ossec-list] Re: Problem with active response in 2.7

2012-12-10 Thread Guilmxm
Le lundi 10 décembre 2012 11:31:10 UTC+1, carlopmart a écrit : Hi all, I am using same active response options in one 2.6 ossec server and in another 2.7 ossec server. In version 2.6 all works ok as I expect, but under 2.7 it doesn't works. In both servers I have configured only this