Thanks for the link the reply, Dan! Is there a default running time if you did not set it? If yes, do you know what it is set to?
Thanks, ram On Thu, Jan 7, 2010 at 6:02 PM, dan (ddp) <[email protected]> wrote: > You can add frequency to the config: > http://www.ossec.net/main/manual/configuration-options/#rootcheck_options > > I think rootcheck is run shortly after ossec starts, then every x seconds > (where x is either 36000 or whatever you set it to). > > On Thu, Jan 7, 2010 at 8:00 PM, RAM <[email protected]> wrote: > > Hi All, > > > > New OSSEC user here. I just have a few simple questions please. > > > > If there is no "frequency" check set in rootcheck portion of > > ossec.conf. > > > > i.e.: > > <rootcheck> > > <rootkit_files>/var/ossec/etc/shared/rootkit_files.txt</rootkit_files> > > <rootkit_trojans>/var/ossec/etc/shared/rootkit_trojans.txt</ > > rootkit_trojans> > > </rootcheck> > > > > When will the rootcheck be executed? Is there a default rootcheck > > time? > > > > > > Thanks in advance! > > > > Ram > > >
