|
Hello Meir & everyone, In the past few days i managed to get a working installation of ossec2mysql in a server-client environment and i'm very happy with the outcome of all the testing and debugging done with the precious help of Meir. Still, one questions remains: my agents all show up in the alerts as 127.0.0.1. For debugging purposes i have the email notification on and all shows up well, i.e. the ips are being resolved or correctly sent. Meir, i've installed the lastest version of ossec-ui dating from 1-Sep-2006 01h10. I don't know if this helps, but here it goes: cat /etc/ossec2base.conf # PARAMS USED BY OSSEC2BASED dbhost=localhost database=ossecbase debug=5 dbport=3306 dbpasswd=<pwd> dbuser=<user> fieldseparator=; daemonize=0 sensor=ossec interface=daemon resolve=1 cat /etc/ossec-init.conf DIRECTORY="/var/ossec" VERSION="v0.9-1" DATE="Wed Aug 30 15:16:17 WEST 2006" TYPE="server" Thanks, ./vcorreia Vitor Correia Systems Administrator -- Mobbit Systems [EMAIL PROTECTED] | Telemóvel: + 351 916 448 025 Avenida do Forte, 8 - 1º Andar - Frente 01 - 2795-503 Carnaxide Telefone: + 351 21 418 01 40 | Fax: + 351 21 418 01 41 [EMAIL PROTECTED] | www.mobbit.net ,-O O(_)) for a better world `-O |
begin:vcard fn:Vitor Correia n:Correia;Vitor org:Mobbit Systems adr;quoted-printable:;;Av. do Forte, N=C2=BA 8 - Andar O1;;Linda-a-Velha;2795-503;Portugal email;internet:[EMAIL PROTECTED] title:Sysadmin tel;work:+351 21 418 01 40 tel;fax:+351 21 418 01 41 tel;cell:+351 91 644 80 25 x-mozilla-html:TRUE url:http://www.mobbit.net version:2.1 end:vcard
