This patch will let syscheck accept the debug command line flag
multiple times.  So you can use "ossec-syscheckd -t -d -d" to see the
debug2 messages.

-OSSEC version number.
    git head as of 2015.8.11

-Content of /etc/ossec-init.conf
DIRECTORY="/usr/local/ossec-git"
VERSION="v2.8"
DATE="Tue Aug 11 18:17:15 EDT 2015"
TYPE="agent"

-Content of /var/ossec/etc/ossec.conf
    I've X-ed out my server IP.

<ossec_config>
  <client>
    <server-ip>X.X.X.X</server-ip>
    <port>1517</port>
  </client>
</ossec_config>

-Content of /var/ossec/logs/ossec.log

-Operating system name/version (uname -a if Unix)
Linux obsession.nss.udel.edu 3.19.0-15-generic #15-Ubuntu SMP Thu Apr 16 
23:32:37 UTC 2015 x86_64 x86_64 x86_64 GNU/Linux

-Any other relevant information.

--- ossec-hids-git/src/syscheckd/syscheck.c     2015-08-11 16:20:43.000000000 
-0400
+++ ossec-hids-git-udel/src/syscheckd/syscheck.c        2015-08-11 
19:17:35.000000000 -0400
@@ -182,7 +203,7 @@
                 break;
             case 'd':
                 nowDebug();
-                debug_level = 1;
+                debug_level ++;
                 break;
             case 'f':
                 run_foreground = 1;

-- 

--- 
You received this message because you are subscribed to the Google Groups 
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to