Hello, I apologize in advance for lack of understanding and I've attempted to look through the forums but I have inherited OSSEC from a predecessor and I have limited *nix experience. I've managed to fix some items but some are still very bewildering.
I'll start with the error: ERROR: Invalid ID for the source ip: 'x.x.x.x' and the IP addresses they list are nowhere in our agent listing. I'm having issues even trying to discover the host that this error is indicating but there are a whole bunch of these for IP addresses that we have not installed OSSEC on. Where can I start to look? Again, without going into this too much more, I have attempted to search the forums and can find information generally on this error if the IP is valid but I'm stumped on the fact that it's giving me this error knowing that those IPs have never been added to the server. Any assistance would be greatly appreciated. Sinisha Erceg IT Security Analyst -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
