I'd really like to run the netstat check on our FTP server. Whenever an FTP Data connection opens on a random high port, OSSEC alerts about netstat changing. Is there a way to run a custom netstat wrapper? I wrote a netstat wrapper that uses -p to exclude vsftpd high ports but OSSEC does not seem to like the command. Any tips please?
Thanks in advance, Scooby -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
