Hi Peter, you're right, the real issue is what's in the logs. Currently they show only the IP address of the router, not of the desktop.
So it's not actually an Ossec issue, but I thought it's maybe a common problem for Ossec users. I don't see how to avoid routers in a network that's spread all over the building, especially if Wifi is used at different locations. Is there any way to show the correct IPs in the log files so that Ossec can parse them correctly? Gratefully, Lyle ----- Original Message ---- From: Peter M. Abraham <[EMAIL PROTECTED]> To: ossec-list <[email protected]> Sent: Tuesday, 11 December, 2007 5:34:15 PM Subject: [ossec-list] Re: IPs behind a router Greetings Lyle: Since ossec just sees what is in the logs, then the real issue is what is being logged. Is that correct? Or are both IP's -- router and desktop -- in the log file? Thank you. __________________________________________________________ Sent from Yahoo! Mail - a smarter inbox http://uk.mail.yahoo.com
