I wanted to point out that is just a name and not necessary ossec
Thank you for using ossec2base please gives us more feedback of your experience with it.
On 8/29/06, Vitor Correia <[EMAIL PROTECTED]> wrote:
thank you, i've reinstalled it for new testing.
i have a question: in your installation instrutions (in the end) you say that in order to run real time feeding of events this command should be executed: /usr/local/bin/ossec2based.pl --conf /etc/ossec2base.conf -d --sensor bigbrother
my question is: shouldn't the argument --sensor refer to the string 'ossec'? (check the default ossec2base.conf)
excellent work Meir, congratulations!
./vcorreia
Meir Michanie wrote:I developed and I am using it in server with a lot of remote agents.
download latest version from
http://www.riunx.com/portal/modules.php?module=tips&mode=article&artid=5
( daniel, can you upload the new version to ossec site)
On 8/29/06, Vitor Correia <[EMAIL PROTECTED] > wrote:Hello everyone,
Has anyone tried ossec2base in a server - client arquitecture? I'm running a testbed with a server and some (mixed o.s.) clients and it seems I can only see reports from the server itself (which gets logged as being 0.0.0.0). Installation and whatnot pointers are welcome :)
Thanks,
Vitor Correia
Systems Administrator
--
Mobbit Systems
[EMAIL PROTECTED]
| Telemóvel: + 351 916 448 025
Avenida do Forte, 8 - 1º Andar - Frente 01 - 2795-503 Carnaxide
Telefone: + 351 21 418 01 40 | Fax: + 351 21 418 01 41[EMAIL PROTECTED] | www.mobbit.net ,-O O(_)) for a better world `-O
Vitor Correia
Systems Administrator
--
Mobbit Systems
[EMAIL PROTECTED] | Telemóvel: + 351 916 448 025
Avenida do Forte, 8 - 1º Andar - Frente 01 - 2795-503 Carnaxide
Telefone: + 351 21 418 01 40 | Fax: + 351 21 418 01 41
[EMAIL PROTECTED] | www.mobbit.net ,-O O(_)) for a better world `-O
