Re: [ossec-list] PSAD rule include error

2018-08-31 Thread Fredrik Hilmersson
Hello Dan, well that solved it! I added the rule in the top of the list, adding it where you suggested (in your conf) and no issues. Thanks for the response as always! Den torsdag 30 augusti 2018 kl. 13:19:17 UTC+2 skrev dan (ddpbsd): > > On Thu, Aug 30, 2018 at 4:11 AM Fredrik Hilmersson > >

Re: [ossec-list] PSAD rule include error

2018-08-30 Thread dan (ddp)
On Thu, Aug 30, 2018 at 4:11 AM Fredrik Hilmersson wrote: > > Hello, > > The ruleset psad_rules.xml which is included in the 3.0.0 version is not by > default included in the ossec.conf file. When i add the the include: > psad_rules.xml within the I get the following error: > > ossec-testrule:

[ossec-list] PSAD rule include error

2018-08-30 Thread Fredrik Hilmersson
Hello, The ruleset psad_rules.xml which is included in the 3.0.0 version is not by default included in the ossec.conf file. When i add the the include: psad_rules.xml within the I get the following error: ossec-testrule: INFO: Reading local decoder file. rules_list: Category '1' not found. Inv