You rock!! Thanks you got rid of the Ghost in the Machine
Sorry Sting... ____________________________________________ Michael Barrett | Information Security Analyst - Lead | Mortgage Guaranty Insurance Corporation 270 E. Kilbourn Ave. | Milwaukee, WI 53202 USA | ( 1.414.347.6271 | 7 1.888.601.4440 | * [email protected] “Accomplishing the impossible means only that your boss will add it to your regular duties” Doug Larson This message is intended for use only by the person(s) addressed above and may contain privileged and confidential information. Disclosure or use of this message by any other person is strictly prohibited. If this message is received in error, please notify the sender immediately and delete this message. |------------> | From: | |------------> >--------------------------------------------------------------------------------------------------------------------------------------------------| |oscar schneider <[email protected]> | >--------------------------------------------------------------------------------------------------------------------------------------------------| |------------> | To: | |------------> >--------------------------------------------------------------------------------------------------------------------------------------------------| |[email protected] | >--------------------------------------------------------------------------------------------------------------------------------------------------| |------------> | Date: | |------------> >--------------------------------------------------------------------------------------------------------------------------------------------------| |03/15/2010 01:33 PM | >--------------------------------------------------------------------------------------------------------------------------------------------------| |------------> | Subject: | |------------> >--------------------------------------------------------------------------------------------------------------------------------------------------| |Re: [ossec-list] Ghost machine showing up | >--------------------------------------------------------------------------------------------------------------------------------------------------| |------------> | Sent by: | |------------> >--------------------------------------------------------------------------------------------------------------------------------------------------| |[email protected] | >--------------------------------------------------------------------------------------------------------------------------------------------------| Hey, when removing an agent with manage_agents, it seems like the agent-info file stored in {ossecdir}/queue/agent-info/ will not be deleted. If you delete that file (in your case probably named "elvis-144.122.90.10" and refresh the WUI, the ghost should not show up anymore. KR, Oscar On Mon, Mar 15, 2010 at 3:10 PM, Michael Barrett <[email protected]> wrote: Hello I have a machine that used to be configured with OSSEC which now has a different IP address The OLD IP address is showing up on the web interface as well as the new IP address The old one shows as inactive. The license key has been removed from the server. How do I get this "ghost" to go away? (Embedded image moved to file: pic21726.jpg) Bad elvis (Embedded image moved to file: pic14771.jpg) Good elvis (Embedded image moved to file: pic11538.jpg) Thank you ____________________________________________ Michael Barrett | Information Security Analyst - Lead | Mortgage Guaranty Insurance Corporation 270 E. Kilbourn Ave. | Milwaukee, WI 53202 USA | ( 1.414.347.6271 | 7 1.888.601.4440 | * [email protected] “Accomplishing the impossible means only that your boss will add it to your regular duties” Doug Larson This message is intended for use only by the person(s) addressed above and may contain privileged and confidential information. Disclosure or use of this message by any other person is strictly prohibited. If this message is received in error, please notify the sender immediately and delete this message.
