[ossec-list] Windows 7

2010-04-22 Thread mikeinet
Hi - Does OSSEC have support for windows 7? 64-bit version as well? If not, when will there be support for this? Thanks! -- Subscription settings: http://groups.google.com/group/ossec-list/subscribe?hl=en

Re: [ossec-list] Re: Rule: 18152 fired (level 10) - Multiple Windows Logon Failures.

2010-04-22 Thread dan (ddp)
Do you have the !-- and -- around the rule? If so, the rule is commented out. This one is a tough one to test due to 18152's structure. I'd consider taking out the hostname field to start with, maybe see if that helps. On Wed, Apr 21, 2010 at 1:56 PM, fusspils fussp...@gmail.com wrote: Thanks

Re: [ossec-list] 64 bit windows 2003

2010-04-22 Thread Alessandro Di Giuseppe
I have the OSSEC 2.4 agent installed on Windows 2003 R2 x64 - works fine. (OSSEC 2.3 worked as well) From: Michael Barrett michael_barr...@mgic.com To: ossec-list@googlegroups.com Sent: Wed, April 21, 2010 1:52:05 PM Subject: [ossec-list] 64 bit windows 2003

[ossec-list] Having problem with install on 64bit system

2010-04-22 Thread Michael Barrett
I am having an issue with one of my systems. This is OSSEC Windows version 2.2 on Windows Sever 2003 64bit I have tried the install via the setup program as well as copying the files from another server and updating the client.keys file and manually creating the service. I also tried to remove

[ossec-list] OSSEC in SCADA environments?

2010-04-22 Thread Xavier Mertens
Hi List, I introduced OSSEC in a big project where HIDS where required to protect hosts. Those hosts are part of a SCADA network! Does anybody has references or experiences with the deployment of OSSEC agents in a SCADA (or any other industrial environment). My goal is not to analyze SCADA

[ossec-list] Problem to add a new client

2010-04-22 Thread rafael.gomes
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Guys, I added a new host in OSSEC environment, but I don`t works. - From the server I got this log: 2010/04/22 15:47:18 ossec-remoted(1403): ERROR: Incorrectly formated message from '1.2.3.4'. - From the new client I got this log: 2010/04/22