On Fri, Jul 8, 2011 at 6:01 PM, William Voyek <[email protected]> wrote: > On Fri, Jul 8, 2011 at 8:06 AM, dan (ddp) <[email protected]> wrote: >> I've never seen the processes run in debug mode without being run in debug >> mode. >> I'd try an upgrade from a clean source directory. Or even trying the 2.6 >> beta. >> >> > > Is there a way to do a clean install while still retaining the agent info? >
You can do an "upgrade" using the same version. Untar the tarball and run the install.sh. It'll ask if this is an upgrade, answer yes. > Also, what are the specific files I need to remove to remove all > traces of ossec? I know I will need to remove /var/ossec but are there > any other files? > > William > It depends on the platform. In Linux I think you'll need to remove /etc/ossec-init.conf and /etc/rc.d/ossec.
