On Jun 29, 2012 5:53 AM, "kay kay" <[email protected]> wrote: > > Not sure why my previous message not appeared in list. >
Because the list is moderated, and the moderators sleep on occassion. > I want to force ossec server to listen TCP port instead of UDP. As UDP packets are frequently being lost. And lots of active-response on agents doesn't work. I've found only one option to use TCP, but it is related to syslog protocol.
