[ossec-list] Agent with ip of network

Hi all, i tested ossec with agents (windows) set ip 10.10.10.0/24, and alway computer within network response with your log (file integrity, evnt vwr). But, when i have alert of integrity file (syscheck) my alert not display the hostname of windows and only dispaly name of agent before

[ossec-list] ossec-remoted not running

Dear All, i doing installing ossec server in RHEL 6.8, but just ossec-remoted not running, i do troubleshooting with commands bellow: #gdb /var/ossec-2.9/bin/ossec-remoted ###RESULT### ... Reading symbols from /var/ossec-2.9/bin/ossec-remoted...(no debugging

Re: [ossec-list] ossec-remoted not running

: > > Is something runnin on port 1514 already? or ossec already running? > > Eero > > 2017-03-01 13:50 GMT+02:00 Eduardo Reichert Figueiredo < > eduardo@hotmail.com >: > >> Dear All, >> i doing installing ossec server in RHEL 6.8, but just ossec-rem

[ossec-list] Re: Unable to connect to remoted

you have a solution for this? Em segunda-feira, 30 de abril de 2012 04:52:29 UTC-3, Mike Sievers escreveu: > > Hi List, > > I am always getting the following error: > > agent_control -r -a > 2012/04/30 09:44:19 agent_control(1210): ERROR: Queue '/queue/alerts/ar' > not accessible: 'Queue not

[ossec-list] AGENT WINDOWS 2012 R2 NOT COMUNICATE WITH OSSEC SERVER

Hi, i have a serious problem with ossec. Windows 2012 r2 servers not comunicate with ossec server. I am use ossec just integrity check, only! So i need that my agent to send logs of syscheck for ossec server, only, but is not ok. I viewed many foruns about this, but i dont found solution. -

Re: [ossec-list] install ossec - bind to port 1514 fail | getaddrinfo: name or service not know

abling IPv6 permanently by > editing file */etc/sysctl.conf*. > > Hope it help. If I find another way to run OSSEC with IPv6 disabled I will > let you know. > > Best regards. > > On Thu, Mar 23, 2017 at 11:19 AM, dan (ddp) <ddp...@gmail.com > > wrote: &g

Re: [ossec-list] install ossec - bind to port 1514 fail | getaddrinfo: name or service not know

> Best regards. > > On Thu, Mar 23, 2017 at 11:19 AM, dan (ddp) <ddp...@gmail.com > > wrote: > >> On Thu, Mar 23, 2017 at 1:08 PM, Eduardo Reichert Figueiredo >> <eduardo@hotmail.com > wrote: >> > Hi dan, i dont have ipv6 enabled in my system

Re: [ossec-list] install ossec - bind to port 1514 fail | getaddrinfo: name or service not know

Hi dan, i dont have ipv6 enabled in my system linux, so i dont have inet6 in my ifconfig configurations, only ipv4. This can caused for the problem? Em quarta-feira, 22 de março de 2017 20:30:08 UTC-3, dan (ddpbsd) escreveu: > > On Tue, Mar 21, 2017 at 10:46 AM, Eduardo Reichert Figu

[ossec-list] Re: install ossec - bind to port 1514 fail | getaddrinfo: name or service not know

Could you share your configuration and the command that you use > to run ossec-authd? It could be very useful for us to help you. > > Best regards. > > > On Tuesday, March 21, 2017 at 7:46:37 AM UTC-7, Eduardo Reichert > Figueiredo wrote: >> >> When i install oss

[ossec-list] Re: install ossec - bind to port 1514 fail | getaddrinfo: name or service not know

Could you share your configuration and the command that you use > to run ossec-authd? It could be very useful for us to help you. > > Best regards. > > > On Tuesday, March 21, 2017 at 7:46:37 AM UTC-7, Eduardo Reichert > Figueiredo wrote: >> >> When i install oss

Re: [ossec-list] timeout - ossec-agentlessd: ERROR: ssh_generic_diff: ossec

C-3, dan (ddpbsd) escreveu: > > On Mon, Mar 13, 2017 at 9:59 AM, Eduardo Reichert Figueiredo > <eduardo@hotmail.com > wrote: > > Dear all, > > i have the ERROR below in my ossec server, and not generated alerts from > > Linux (agentless) in ossec. > > I

Re: [ossec-list] timeout - ossec-agentlessd: ERROR: ssh_generic_diff: ossec

his command? Em quarta-feira, 15 de março de 2017 16:21:03 UTC-3, dan (ddpbsd) escreveu: > > On Mon, Mar 13, 2017 at 9:59 AM, Eduardo Reichert Figueiredo > <eduardo@hotmail.com > wrote: > > Dear all, > > i have the ERROR below in my ossec server, and not generate

Re: [ossec-list] timeout - ossec-agentlessd: ERROR: ssh_generic_diff: ossec

03 UTC-3, dan (ddpbsd) escreveu: > > On Mon, Mar 13, 2017 at 9:59 AM, Eduardo Reichert Figueiredo > <eduardo@hotmail.com > wrote: > > Dear all, > > i have the ERROR below in my ossec server, and not generated alerts from > > Linux (agentless) in ossec. > &

Re: [ossec-list] ossec-remoted not running

de março de 2017 15:37:55 UTC-3, dan (ddpbsd) escreveu: > > On Wed, Mar 1, 2017 at 6:59 AM, Eduardo Reichert Figueiredo > <eduardo@hotmail.com > wrote: > > Port 1514 is already, i received UPD packets (validated with tcpdump), > ossec > > is running

[ossec-list] Developer ossec

Hi all, this ossec is writed in C, correct? how development/contribute to ossec with development in C (or other language)? Kind regards, -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving

Re: [ossec-list] Developer ossec

/pull-request-tutorial/. > > Best regards, > Pedro Sanchez. > > On Mon, Mar 13, 2017 at 12:23 PM, Eduardo Reichert Figueiredo < > eduardo@hotmail.com > wrote: > >> Hi all, >> this ossec is writed in C, correct? >> >> how development/c

[ossec-list] timeout - ossec-agentlessd: ERROR: ssh_generic_diff: ossec

Dear all, i have the ERROR below in my ossec server, and not generated alerts from Linux (agentless) in ossec. I search more error similars in this foruns but i dont founded solution. Can you help me? 2017/03/13 10:42:35 ossec-agentlessd: DEBUG: buffer: [ossec@SERVIDOR-01 ~]$ 2017/03/13

[ossec-list] Re: Is OSSEC 2.9.0 officially released?

i dont know, but good question... Em segunda-feira, 6 de março de 2017 11:01:32 UTC-3, Kat escreveu: > > Hi all, > > It seems to me that 2.9.0 is released - at least no more RC# after the > last one. My question is, is this the case, and if so, could the website be > updated to reflect it?

Re: [ossec-list] ossec-remoted not running

Hi, my problem is keys of agents, now are ok. Thanks!! Em sábado, 4 de março de 2017 18:33:43 UTC-3, dan (ddpbsd) escreveu: > > On Sat, Mar 4, 2017 at 2:36 PM, Eduardo Reichert Figueiredo > <eduardo@hotmail.com > wrote: > > Hi All, > > i killed de process and

Re: [ossec-list] Re: Windows override Audit Events. Decoder

Hi all, exist possiblity of write source ip address in eventos of integrity check? For the alert display real IP? Em sexta-feira, 3 de março de 2017 15:55:14 UTC-3, dan (ddpbsd) escreveu: > > On Fri, Mar 3, 2017 at 3:04 AM, Casimiro > wrote: > > I solve my problem with

[ossec-list] ossec-logcollector: socketerr (not available).

Dear all, my ossec dont list agentless servers with command "agent_control -l" and in my ossec.log i have log below. 2017/03/06 11:27:54 ossec-logcollector: socketerr (not available). 2017/03/06 11:30:04 ossec-logcollector: socketerr (not available). 2017/03/06 11:32:14 ossec-logcollector:

Re: [ossec-list] install ossec - bind to port 1514 fail | getaddrinfo: name or service not know

t; > > You probably used this method to disable IPv6, so please try to remove (or > comment) those lines, reboot your system and start OSSEC again. > > Best regards. > > On Wed, Mar 29, 2017 at 3:30 PM, Eduardo Reichert Figueiredo < > eduardo@hotmail.com > wrote: >

[ossec-list] install ossec - bind to port 1514 fail | getaddrinfo: name or service not know

When i install ossec 2.9.0 on rhel 7.3 (no ipv6 feature and address) i have a problem to ossec-remoted and ossec-auth, this services cant bind ports 1514, log error below. I generated my certificated with commands "openssl genrsa -out" and "openssl req -new -x509 -key ". ##Log OSSEC.LOG