Hello to all! I download and installed successfully the OSSEC 2.7 but when i try to install with prelude suuport enabled, based on the instructions in the manual, the installation scripts fails in the analysisd part with the following error
gcc -g -Wall -I../ -I../headers -DDEFAULTDIR=\"/var/ossec\" -DUSE_OPENSSL -DUSEINOTIFY -DARGV0=\"ossec-analysisd\" -DXML_VAR=\"var\" -DOSSECHIDS -I./ analysisd.c stats.c lists.c lists_list.c rules.c rules_list.c config.c fts.c dodiff.c eventinfo.c eventinfo_list.c cleanevent.c active-response.c picviz.c prelude.c compiled_rules/*.o ../config/lib_config.a decoders/decoders.a cdb/cdb.a cdb/cdb_make.a alerts/alerts.a ../os_xml/os_xml.a ../os_regex/os_regex.a ../os_net/os_net.a ../shared/lib_shared.a ../os_zlib/os_zlib.c ../external/libz.a -DPRELUDE -lprelude -I/usr/local/include -L/usr/local/lib -lprelude -lgnutls -lgcrypt -ldl -lgcc_s -lpthread -o ossec-analysisd /usr/bin/ld: cannot find -lgnutls collect2: ld returned 1 exit status make[1]: *** [logaudit] Error 1 make[1]: Leaving directory `/opt/paketa/ossec/ossec-hids-2.7/src/analysisd' Error Making analysisd make: *** [all] Error 1 Error 0x5. Building error. Unable to finish the installation. The setup for enabled prelude support was working for me in the OSSEC 2.6 version. Also followed the suggestion here ( http://www.howtoforge.com/snort-ossec-prelude-on-ubuntu-gutsy-gibbon-p3) but no luck Any ides are welcome... Thanks!!!
