[ossec-list] Re: OSSEC2BASE

[Vitor Correia]

thank you, i've reinstalled it for new testing. i have a question: in your installation instrutions (in the end) you say that in order to run real time feeding of events this command should be executed: /usr/local/bin/ossec2based.pl --conf /etc/ossec2base.conf -d --sensor bigbrother my question is: shouldn't the argument --sensor refer to the string 'ossec'? (check the default ossec2base.conf) excellent work Meir, congratulations! ./vcorreia Meir Michanie wrote: I developed  and I am using it in server with a lot of remote agents. download latest version from http://www.riunx.com/portal/modules.php?module=tips&mode=article&artid=5 ( daniel, can you upload the new version to ossec site) On 8/29/06, Vitor Correia <[EMAIL PROTECTED] > wrote: Hello everyone, Has anyone tried ossec2base in a server - client arquitecture? I'm running a testbed with a server and some (mixed o.s.) clients and it seems I can only see reports from the server itself (which gets logged as being 0.0.0.0). Installation and whatnot pointers are welcome :) Thanks, Vitor Correia Systems Administrator -- Mobbit Systems [EMAIL PROTECTED] | Telemóvel: + 351 916 448 025 Avenida do Forte, 8 - 1º Andar - Frente 01 - 2795-503 Carnaxide Telefone: + 351 21 418 01 40 | Fax: + 351 21 418 01 41 [EMAIL PROTECTED] | www.mobbit.net ,-O O(_)) for a better world `-O Vitor Correia Systems Administrator -- Mobbit Systems [EMAIL PROTECTED] | Telemóvel: + 351 916 448 025 Avenida do Forte, 8 - 1º Andar - Frente 01 - 2795-503 Carnaxide Telefone: + 351 21 418 01 40 | Fax: + 351 21 418 01 41 [EMAIL PROTECTED] | www.mobbit.net ,-O O(_)) for a better world `-O

begin:vcard
fn:Vitor Correia
n:Correia;Vitor
org:Mobbit Systems
adr;quoted-printable:;;Av. do Forte, N=C2=BA 8 - Andar O1;;Linda-a-Velha;2795-503;Portugal
email;internet:[EMAIL PROTECTED]
title:Sysadmin
tel;work:+351 21 418 01 40
tel;fax:+351 21 418 01 41
tel;cell:+351 91 644 80 25
x-mozilla-html:TRUE
url:http://www.mobbit.net
version:2.1
end:vcard