Hi Zack and ddp, OSSEC supports Sparc, but it needs the "-DHIGHFIRST" flag when compiling it. We generally auto-detect it properly, but it seems that in your case we are not.
Can you go to the OSSEC source and on the file src/Config.Make add the following to the CFLAGS? -DOSSECHIDS -DHIGHFIRST And recompile it? $ cd src $ make clean $ make all $ make build $ cp -pr ../bin/* /var/ossec/bin If it works, we will have to auto-detect it better. Thanks, -- Daniel B. Cid dcid ( at ) ossec.net On Thu, Jun 25, 2009 at 10:51 AM, ddp<[email protected]> wrote: > > Is the error something like "incorrectly formatted message from > agent?" (I don't have the exact message I'm thinking of handy, sorry) > I get the same thing when using a OpenBSD/MacPPC server and an i386 > agent. What architectures are your clients using? I haven't gotten a > chance to test PPC -> PPC. I'm wondering if a sparc64 -> sparc64 > works. > > On Thu, Jun 25, 2009 at 3:56 AM, Zack<[email protected]> wrote: >> >> I've installed ossec 2.0 on sparc 64 processor and OS is FreeBSD >> 7.2.It was installed successfully and working properly. But we cannot >> connect agents. Ossec gives some kind of errors. We had verified >> client keys on both server and client side. But result was the same. >> Then we changed server machine to Dell 2950. OS is FreeBSD. We can >> connect agents without any error. >> Question: What is the reason? Does not Ossec work on Sparc processor? >> >> >
