On 01/12/2011 08:59 AM, NewRules wrote:
Hi,
I just make a fresh install the version 2.5.1 of ossec on an AIX
server. But when I try to start OSSEC i get this :
./bin/ossec-control start
Starting OSSEC HIDS v2.5.1 (by Trend Micro Inc.)...
2011/01/12 15:49:03 ossec-analysisd(1226): ERROR: Error reading XML file
'etc/decoder.xml': XML ERR: Bad
formed XML. Element not opened (line 1923).
2011/01/12 15:49:03 ossec-testrule(1202): ERROR: Configuration error at
'/etc/decoder.xml'.
Exiting. ossec-analysisd: Configuration error. Exiting.
I looked at etc/decoder.xml and there is nothing to declare about an
element that is not opened.
Try replacing the decoder.xml with the one from the previous version.
Make sure to check permissions. That should narrow it to a new build issue.
