Try http://www.ossec.net/dcid/?p=112
Regards, On 10/13/07, Michael Starks <[EMAIL PROTECTED]> wrote: > > pipo02 wrote: > > i'm using 1.3, which i thought support that option. > > I don't think so. It's not in the changelog: > http://ossec.net/announcements/v1.3-2007-08-08.txt > -- ========================= Rodrigo Ribeiro Montoro Analista de Segurança SnortCP / RHCE / LPIC-I http://spookerlabs.multiply.com =========================
