On Sat, Jul 2, 2011 at 12:05 PM, William Voyek <[email protected]> wrote: > On Sat, Jul 2, 2011 at 5:33 AM, dan (ddp) <[email protected]> wrote: >> Try deleting everything from the file. I don't think things should be >> running in debug based on those contents, but I can't look into it now. >> >> > > Ok, I tried deleting the contents of the file and I even tried > deleting the file altogether but I still get the same result: > > OSSEC HIDS v2.5.1 Stopped > Starting OSSEC HIDS v2.5.1 (by Trend Micro Inc.)... > 2011/07/02 09:01:43 ossec-testrule: INFO: Reading local decoder file. > Started ossec-maild... > Started ossec-execd... > 2011/07/02 09:01:43 ossec-analysisd: DEBUG: Starting on debug mode - > 1309622503 > Started ossec-analysisd... > Started ossec-logcollector... > Started ossec-remoted... > Started ossec-syscheckd... > Started ossec-monitord... > Completed. > > William >
Are analysisd and logcollector running with "-d"? This is working for me with the 2.6 beta, and I don't think the script changed between 2.5.1 and 2.6b.
