On Tue, Nov 26, 2013 at 2:32 PM, dan (ddp) <[email protected]> wrote: > On Tue, Nov 26, 2013 at 9:26 AM, C. L. Martinez <[email protected]> wrote: >> This: >> [root@ossec02 logs]# md5sum /var/ossec/etc/shared/agent.conf >> 55188a008ab5daf74988aaf585e56f64 /var/ossec/etc/shared/agent.conf >> > > So the agent.conf isn't being updated on the agent. > Check permissions of the files in etc/shared. Restart the agent if necessary. >
Incorrect, agent.conf is updated in the agents. For example in this agent: [root@ossec02 alerts]# agent_control -i 002 OSSEC HIDS agent_control. Agent information: Agent ID: 002 Agent Name: agent02.adsi.intranet.local IP address: 10.196.0.104 Status: Active Operating system: FreeBSD agent02.adsi.intranet.local 8.4-RELEASE-p.. Client version: OSSEC HIDS v2.7.1 / 55188a008ab5daf74988aaf585e56f64 Last keep alive: Tue Nov 26 14:35:11 2013 Syscheck last started at: Tue Nov 26 04:01:49 2013 Rootcheck last started at: Tue Nov 26 04:00:42 2013 but the server has not given the order to restart. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
