Hi Peter, Can you send along some of your Sonicwall rules to us? I just added a bunch of those based on the logs you sent to me and they are available at the latest snapshot:
http://www.ossec.net/files/snapshots/ossec-hids-070902.tar.gz If you can try it out and let us know how it goes... Thanks, -- Daniel B. Cid dcid ( at ) ossec.net On 8/31/07, Peter M. Abraham <[EMAIL PROTECTED]> wrote: > > Greetings: > > I created a small number of sonicwall rules in /var/ossec/rules/ > local_rules.xml > > When I restarted ossec, it told me there was no "sonicwall" decoder. > > When I commented out the decoder section for "sonicwall" in /var/ossec/ > etc/decoder.xml I was told there is an error in the sonicwall decoder. > > I was not sure how to fix the error, but wanted to pass this along. > > Thank you. > > P.S. I did privately email relevant sonicwall log info. > >
