Hello according to the archives this bug was fixed in v2.6. I upgraded from v2.4.1 to v2.7-beta1, and am experiencing it with 20 'alerts' daily:
--------------------------- OSSEC HIDS Notification. 2012 Oct 01 16:43:49 Received From: localhost->ossec-keepalive Rule: 1002 fired (level 2) -> "Unknown problem somewhere in the system." Portion of the log(s): --MARK--: 2wmk5Jv*BysMK0no]^P35bH1IL^?STPpxj$KTdvC^OwtW=+?6(l))SOv.x9Qy6nd^[N&Lrm8n=J9%#8.Z)&[Gz4*eHBDh,_-F&7ybBbos;=P5hMy]w6^dE0i@K'A_vrtfGSgpb8I'h=Yp*EYVf+ZJ.p3HW.!*2.=Q.L6/2W;9]/G#D/B-BIzzfKoj-;]aEA?Bt5%+9oh4mNK.[t)v21cpfrzJj8;NQ =x9efh$toL)jD*dW4$6$^EBa3!YF2TDbygfD1(ex@;Hir;n+5)lP5M.CqdpBfSCDhI788taOl+WC$96Nf*K!@+VJH!!M@V^AL/cnsQ1*)621=CW,1OpG*!^s,c47XObQMS3mQ$/EN0N(Kd^T?/'&qqdms7Cx3*vY*H!Co8oj&1]ums$l4o]_)/Pf6***kUJ,]oyjE[6pV2=7Cn(bB$+ouE8I3bt%V3 !R*QipK^(?'!ov=Ow690+./fFkgZ;jwkiV0rsSaf?'^nooj'_(Tr&?wpj&wPIaZQd77wtp^sig)@u,mi^5%h4S!wDb@tP)9TULxw0g,rm&KGuW,d9!k+xDliEFB)sS_u.l/gr]@D@pr?t2R,_j*ZML7y&QmQdOs --------------------------- -- Adrian C. (anrxc) | anrxc..sysphere.org | PGP ID: D20A0618 PGP FP: 02A5 628A D8EE 2A93 996E 929F D5CB 31B7 D20A 0618
