On Wed, Jan 12, 2011 at 9:59 AM, NewRules <[email protected]> wrote: > Hi, > > I just make a fresh install the version 2.5.1 of ossec on an AIX > server. But when I try to start OSSEC i get this : > >> ./bin/ossec-control start >> Starting OSSEC HIDS v2.5.1 (by Trend Micro Inc.)... >> 2011/01/12 15:49:03 ossec-analysisd(1226): ERROR: Error reading XML file >> 'etc/decoder.xml': XML ERR: Bad >> formed XML. Element not opened (line 1923). >> 2011/01/12 15:49:03 ossec-testrule(1202): ERROR: Configuration error at >> '/etc/decoder.xml'. >> Exiting. ossec-analysisd: Configuration error. Exiting. > > I looked at etc/decoder.xml and there is nothing to declare about an > element that is not opened. > > Does someone has already experienced something weird like this ? And > do you have a solution ? > > FYI : I didn't have this problem with OSSEC 2.4. > > Thanks !
Did you modify the decoder.xml? I haven't seen any reports of issues from anyone else, and I don't see anything odd around line 1923 in the current decoder.xml.
