This is starting to border on the absurd. Do you have any linux experience?
On Feb 12, 2015 8:50 PM, "Network Infrastructure" <[email protected]> wrote: > > when I type in ossec manager: tcpdump -i inside -Xxnnnevvvs 0 port 2514 192.168.11.1 and I also type: tcpdump -i inside -Xxnnnevvvs 0 2514 192.168.11.1 > You took out the "host" i had provided for you. > and it show message that: > > tcpdump: inside: No such device exists > (SIOGIFHWADDR: No such device) > You used the wrong interface name. Please give me the output of: `ifconfig -a` OSSEC is not a turnkey solution, it will require maintenence. So far your technical prowess does not instill confidence. > On Friday, February 6, 2015 at 9:11:33 AM UTC+7, Network Infrastructure wrote: >> >> I have configured OSSEC to monitor my ASA 5520 but I cannot see anything >> >> In ASA 5520, I enable syslog server to send syslog to my OSSEC >> >> >> In OSSEC, the /var/ossec/etc/ossec.conf, I configed: >> >> <ossec_config> >> >> <remote> >> <connection>syslog</connection> >> <allowed-ips>IP_OF_CISCO_DEVICE</allowed-ips> >> </remote> >> <global> >> <logall>yes</logall> >> </global> >> >> </ossec_config> >> >> Then I restart ossec services but I cannot see anything. >> >> >> Help me please ... > > -- > > --- > You received this message because you are subscribed to the Google Groups "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
