I am trying to get ossec agent to work on Windows Server 2012, and having problem with active-response being unable to block IP. My ossec server, and agent are v2.8
This is the output from active-responses.log [active-responses.log] 2015/11/24 1:23:22.50 C:\Program Files (x86)\ossec-agent\active-response\bin\"active-response/bin/route-null.cmd" add - "104.192.0.226" 2015/11/24 1:40:46.89 C:\Program Files (x86)\ossec-agent\active-response\bin\"active-response/bin/route-null.cmd" delete - "104.192.0.226" I'm running Windows Japanese version on which directory separator character is '\' but '/' are seen later in the path. I don't know if it's related to this problem. What did I wrong? Any comments would be appreciated. Thanks in advance -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
