This happened to me as well as alot of other folks. Daniel said he had fixed the bug, so at the time all I did was update to the latest snapshot and the problem went away.
http://www.ossec.net/files/snapshots -cb On Wed, Mar 26, 2008 at 10:24 AM, Chuck Braden <[EMAIL PROTECTED]> wrote: > > Well, I say there was no hash email. But it seems that the mailD had stopped. > When I started it back this morning, I DID get 3 notifications of syscheck > registry. But, the time stamps were from this morning. So Im not sure if > they were cut yesterday or not. I guess I need to repeat the test. > > It seems the maild is stopping frequently. Any place I can look to see why? > > >>> Michael Starks <[EMAIL PROTECTED]> 3/25/2008 8:07 PM >>> > > > Chuck Braden wrote: > > Tried the same USB today. No integrity scan hash change. Stopped and > > started task with media in and then ejected and stopped/started again. > > Still no email of hash change. > > You can try firing up regmon to monitor the registry changes in real time. > > HTH, > -Mike > >
