subject:"\[ossec\-list\] local_decoder.xml \-\- can't override \(ignore\) parent decoder"

Re: [ossec-list] local_decoder.xml -- can't override (ignore) parent decoder

2017-01-19 Thread dan (ddp)

On Tue, Jan 17, 2017 at 2:53 PM, Daniel B. wrote: > We use weave which periodically causes a network interface to enter > promiscuous mode to sniff network traffic. This is expected behavior, and as > such, I'm looking to ignore it. > > For reference, the iptables

[ossec-list] local_decoder.xml -- can't override (ignore) parent decoder

2017-01-17 Thread Daniel B.

We use weave which periodically causes a network interface to enter promiscuous mode to sniff network traffic. This is expected behavior, and as such, I'm looking to ignore it. For reference, the iptables decoder is set at