For information, I tried to change the option in /var/ossec/etc/internal_options.conf only for the OSSEC server.
It works without changing it for the agents. Le mardi 3 mai 2016 20:19:52 UTC+2, Zekicker a écrit : > > Thanks to you two !!! > > :) > > > Le mardi 3 mai 2016 17:15:08 UTC+2, Santiago Bassett a écrit : >> >> Yes, and on the agents too. I know the agents do not run remoted but they >> also use this variable to check counters. >> >> Santiago Bassett >> @santiagobassett >> >> > On May 3, 2016, at 7:36 AM, dan (ddp) <[email protected]> wrote: >> > >> >> On Tue, May 3, 2016 at 10:26 AM, Zekicker <[email protected]> wrote: >> >> Hi, >> >> >> >> Is it possible to disable the anti-replay feature of OSSEC ? >> >> >> >> I need to deploy and delete some VMs on demand. All must be automatic. >> >> >> >> Do you have an idea to di it simple ? >> > >> > I believe you can set "remoted.verify_msg_id" to 0 in >> > /var/ossec/etc/internal_options.conf on the manager. >> > >> >> regards, >> >> >> >> -- >> >> >> >> --- >> >> You received this message because you are subscribed to the Google >> Groups >> >> "ossec-list" group. >> >> To unsubscribe from this group and stop receiving emails from it, send >> an >> >> email to [email protected]. >> >> For more options, visit https://groups.google.com/d/optout. >> > >> > -- >> > >> > --- >> > You received this message because you are subscribed to the Google >> Groups "ossec-list" group. >> > To unsubscribe from this group and stop receiving emails from it, send >> an email to [email protected]. >> > For more options, visit https://groups.google.com/d/optout. >> > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
