Hi Doug,

that's exactly it! Thanks a bunch for pointing me to the pull request. I
have applied the changes and now it works again :)

Thank you for your help.

Cheers
Leo



2014-11-18 15:20 GMT+01:00 Doug Burks <[email protected]>:

> Hi Leo,
>
> Could you be experiencing the symptom described here?
> http://www.ossec.net/?p=1135#comment-555
>
> Also see:
> https://github.com/ossec/ossec-hids/pull/315
>
> On Tue, Nov 18, 2014 at 9:06 AM, Leo Feyer <[email protected]> wrote:
> > I don't think this is the reason. Here's the command line output:
> >
> > /var/ossec/active-response/bin/host-deny.sh: 114:
> > /var/ossec/active-response/bin/host-deny.sh: TMP_FILE: not found
> > /var/ossec/active-response/bin/host-deny.sh: 117:
> > /var/ossec/active-response/bin/host-deny.sh: TMP_FILE: not found
> > /var/ossec/active-response/bin/host-deny.sh: 123:
> > /var/ossec/active-response/bin/host-deny.sh: cannot create : Directory
> > nonexistent
> >
> > Does this look familiar to anyone?
> >
> > --
> >
> > ---
> > You received this message because you are subscribed to the Google Groups
> > "ossec-list" group.
> > To unsubscribe from this group and stop receiving emails from it, send an
> > email to [email protected].
> > For more options, visit https://groups.google.com/d/optout.
>
>
>
> --
> Doug Burks
> Need Security Onion Training or Commercial Support?
> http://securityonionsolutions.com
>
> --
>
> ---
> You received this message because you are subscribed to a topic in the
> Google Groups "ossec-list" group.
> To unsubscribe from this topic, visit
> https://groups.google.com/d/topic/ossec-list/jdngrV_XMCU/unsubscribe.
> To unsubscribe from this group and all its topics, send an email to
> [email protected].
> For more options, visit https://groups.google.com/d/optout.
>

-- 

--- 
You received this message because you are subscribed to the Google Groups 
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to