Try adding an OSSEC localfile full_command directive using one of the following commands listed in this thread (basically, ethtool or mii-tool):
http://lists.samba.org/archive/linux/2006-June/015442.html On Wed, Sep 7, 2011 at 7:10 AM, Eero Volotinen <[email protected]>wrote: > Hi List, > > I want alert to ossec when linux interface (ethernet) link goes down ? > How to do this? > > -- > Eero >
