/var/ossec/bin/syscheck_update -u local ? It'll also run on start by default, so ``ossec-control restart`` should have started a scan.
On Sun, Dec 25, 2011 at 7:51 AM, metal <[email protected]> wrote: > Hello, I am newbie and i just installed OSSEC local in my VMware. > I have read most of the rules and how it works but for time being I > would like to try it on my default configuration. > > I have been trying to run a scan on my ubuntu server but i am not > being able to do that. I have searched but i can only find it how do > it on agent. > > I have installed a rootkit on my ubuntu server and i have modified ls. > Now just want to detect those changes but I am not being able to run a > scan which you evetually scan and notify me about changes. > > I have started my ossec-control and after that i'm hopeless i didn't > understand what to do. I just find information on agents and server. > Please do help me.
