Hi Hugh,
For the compression/uncompression problem, can you try our latest snapshot? It has an additional fix from Martin and it should work now on 64 bits. http://www.ossec.net/files/snapshots/ossec-hids-170806.tar.gz Now, related to the blocking problem. Can you show us your: /var/ossec/logs/ossec.log /var/ossec/etc/ossec.conf /var/ossec/active-response/ossec-hids-responses.log It will help us identify the problem. Thanks, -- Daniel B. Cid dcid ( at ) ossec.net On 8/17/06, Hugh Riley <[EMAIL PROTECTED]> wrote:
Yes. 0.9-1 is on both the server and the agent. Fresh installs on both.
