I downloded source for 2.4 and installed but when i do ./ossec-execd -V
OSSEC HIDS v2.3 - Trend Micro Inc. This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License (version 2) as published by the Free Software Foundation. For more details, go to http://www.ossec.net/main/license/ does anybody know why On Apr 1, 4:18 pm, "Peter M. Abraham" <[email protected]> wrote: > Greetings Dan: > > 2010/04/01 16:16:07 ossec-syscheckd(1210): ERROR: Queue '/var/ossec/ > queue/ossec/queue' not accessible: 'Connection refused'. > 2010/04/01 16:16:07 ossec-rootcheck(1210): ERROR: Queue '/var/ossec/ > queue/ossec/queue' not accessible: 'Connection refused'. > > Is what I get if I edit /var/ossec/ossec.conf to comment out those > rules which we don't need or even re-organize the rules. > > I.e. something as simple as replacing the rules with the following > (same rules, rules we don't need moved below): > > <include>rules_config.xml</include> > <include>pam_rules.xml</include> > <include>sshd_rules.xml</include> > <include>telnetd_rules.xml</include> > <include>syslog_rules.xml</include> > <include>arpwatch_rules.xml</include> > <include>named_rules.xml</include> > <include>vsftpd_rules.xml</include> > <include>proftpd_rules.xml</include> > <include>ms_ftpd_rules.xml</include> > <include>ftpd_rules.xml</include> > <include>hordeimp_rules.xml</include> > <include>roundcube_rules.xml</include> > <include>wordpress_rules.xml</include> > <include>vpopmail_rules.xml</include> > <include>vmpop3d_rules.xml</include> > <include>courier_rules.xml</include> > <include>web_rules.xml</include> > <include>apache_rules.xml</include> > <include>php_rules.xml</include> > <include>mysql_rules.xml</include> > <include>postgresql_rules.xml</include> > <include>ids_rules.xml</include> > <include>squid_rules.xml</include> > <include>firewall_rules.xml</include> > <include>cisco-ios_rules.xml</include> > <include>sonicwall_rules.xml</include> > <include>postfix_rules.xml</include> > <include>sendmail_rules.xml</include> > <include>imapd_rules.xml</include> > <include>ms-exchange_rules.xml</include> > <include>spamd_rules.xml</include> > <include>msauth_rules.xml</include> > <!-- <include>policy_rules.xml</include> --> > <include>vmware_rules.xml</include> > <include>ms_dhcp_rules.xml</include> > <include>ossec_rules.xml</include> > <include>attack_rules.xml</include> > <include>local_rules.xml</include> > > <include>symantec-av_rules.xml</include> > <include>symantec-ws_rules.xml</include> > <include>pix_rules.xml</include> > <include>smbd_rules.xml</include> > <include>pure-ftpd_rules.xml</include> > <include>cimserver_rules.xml</include> > <include>nginx_rules.xml</include> > <include>netscreenfw_rules.xml</include> > <include>mailscanner_rules.xml</include> > <include>dovecot_rules.xml</include> > <include>racoon_rules.xml</include> > <include>vpn_concentrator_rules.xml</include> > <include>mcafee_av_rules.xml</include> > <include>trend-osce_rules.xml</include> > <include>ms-se_rules.xml</include> > <include>zeus_rules.xml</include> > <include>solaris_bsm_rules.xml</include> > <include>asterisk_rules.xml</include> > > Can you please fix this bug? > > Thank you. -- To unsubscribe, reply using "remove me" as the subject.
