Hello,
I have a problem.
I Installed an ossec agent into
a machine, an ossec server (with mysql support) into another machine
(and also the ossec-wui component for the web interface) .
I start the agent, then I start the server:
in the ossec.log file , of server, it appears a message like:
" 2008/06/05 15:41:31 ossec-dbd: Connected to database 'ossecdb' at ..... "
but does not appear a message like:
" ... ossec-dbd Started ..." :
Is it normal?
Morevover, in the web interface I see alerts (from the agent) of snort and
integrity check,
but
in the mysql tables (of server) I do not see records in ossecdb tables
"alert" and "event" . Anyway I see some records (not of events of
alerts) stored inside (for example)
"signature" table and "location" table.
How can I resolve the problem?
Thank you .
Bye.
___________________________________
Scopri il Blog di Yahoo! Mail: trucchi, novità , consigli... e la tua opinione!
http://www.ymailblogit.com/blog/
