Hi; I have a client who asked if ossec can run on hypervisors. With Dilbert in mind, I was tempted to ask "what color do you want that database?", but refrained.
I've used HP's virtualization tech, am familiar with Solaris's at a conceptual level, and know next to nothing about vmware's. With both HP and Solaris, I can install ossec on the host operating systems and have it operate as normal - probably with some additions/deletions to the dirs/ignores and log files, but still, pretty much as documented. Does anyone know if vmware's hypervisor (vSphere??) is an actual OS on which we can install anything, much less OSSEC? I saw a report of a survey in 2009 from Trend Micro about the use of ossec in which hypervisors were mentioned; but, I couldn't tell if that was ossec specifically or if that involved other Trend Micro services or products... Short of downloading a vshere eval copy and trying the install, I'm a bit stuck. My googling must be weak today as I'm not finding anything meaningful and the whole download method seems like a lot of effort just to find out if I can run ossec on it... (I won't even ask about the mainframe and HP3000 they want this on too :) ) Thanks for any info/tips you can provide... Doug O'Leary
