[ossec-list] newbie question?

[Dennis Borkhus-Veto]

Or this may be a stupid question based on the knowledge of this list.   I have been working on getting Ossec running and I have been very pleased but I have a question. I have ossec monitoring my logs from my Exchange server but I am not sure what they mean see below for a sample. I have modified some of my internal address info.   Received From: (my Exchange server) 192.168.x.x->\newsmtplog\SMTPSVC1\ex061009.log Rule: 31122 fired (level 5) -> "Web server 500 error code (Internal Error)." Portion of the log(s):   2006-10-09 14:04:46 69.217.186.117 - SMTPSVC1 MEE-PDC 192.168.X.X 0 xxxx - +hupylaw.hupy.local 500 0 32 23 0 SMTP - - - -     Sincerely Dennis Borkhus-Veto Systems Administrator MEE Material Handling L.L.C [EMAIL PROTECTED]