Thanks guys. Well, it is running NFS for sure. Someone in our group already did that exercise of checking why netstat is lying and so I just wanted to avoid ossec checking this thing. If there is not easy to avoid checking , I will go with Satish's way of no_email_alert ;)
Version solaris is 10 and Ossec is 2.5.1 BTW, why isn't there an email alert sent when someone replies to my topic?
