[ossec-list] OSSEC is falling to start

2014-11-30 Thread finid
Folks, I have a test system that I just started having problems with, and the main problem is that OSSEC is not starting. Debugging is enabled and when I try to start it, I get: /var/ossec/bin/ossec-control: 69: /var/ossec/bin/ossec-control: cannot create

Re: [ossec-list] OSSEC is falling to start

2014-11-30 Thread dan (ddp)
On Nov 30, 2014 10:11 AM, fi...@vivaldi.net wrote: Folks, I have a test system that I just started having problems with, and the main problem is that OSSEC is not starting. Debugging is enabled and when I try to start it, I get: /var/ossec/bin/ossec-control: 69:

Re: [ossec-list] OSSEC is falling to start

2014-11-30 Thread finid
I thought that was the issue too, but I have 3.1 GB of free disk space. -- finid On 2014-11-30 09:33, dan (ddp) wrote: On Nov 30, 2014 10:11 AM, fi...@vivaldi.net wrote: Folks, I have a test system that I just started having problems with, and the main problem is that OSSEC is not

Re: [ossec-list] OSSEC is falling to start

2014-11-30 Thread dan (ddp)
On Nov 30, 2014 11:21 AM, fi...@vivaldi.net wrote: I thought that was the issue too, but I have 3.1 GB of free disk space. Do you have free inodes? -- finid On 2014-11-30 09:33, dan (ddp) wrote: On Nov 30, 2014 10:11 AM, fi...@vivaldi.net wrote: Folks, I have a test

Re: [ossec-list] OSSEC is falling to start

2014-11-30 Thread Michael Starks
On 11/30/2014 10:04 AM, fi...@vivaldi.net wrote: I thought that was the issue too, but I have 3.1 GB of free disk space. http://www.ivankuznetsov.com/2010/02/no-space-left-on-device-running-out-of-inodes.html -- --- You received this message because you are subscribed to the Google Groups

Re: [ossec-list] OSSEC is falling to start

2014-11-30 Thread finid
On 2014-11-30 10:29, Michael Starks wrote: On 11/30/2014 10:04 AM, fi...@vivaldi.net wrote: I thought that was the issue too, but I have 3.1 GB of free disk space. http://www.ivankuznetsov.com/2010/02/no-space-left-on-device-running-out-of-inodes.html Thanks a bundle, -- finid -- ---

[ossec-list] OSSEC and UFW

2014-11-30 Thread finid
Hya, I've seen docs that show how to configure OSSEC to work with IPTables, the firewall application used in the firewall-drop.sh script. On Linux distributions that use UFW as the default firewall application, what are the steps that need to be taken for it to work with OSSEC in banning

[ossec-list] Monitoring /var/ossec

2014-11-30 Thread finid
Hi, In a test installation, I noticed that if I add /var/ossec directory in the list of directories that syscheck should monitor, disk usage speeds up really fast. In less than 2 hours, disk usage on on a test system doubled. What's the best practice for monitoring /var/ossec? I want to

Re: [ossec-list] OSSEC and UFW

2014-11-30 Thread dan (ddp)
On Nov 30, 2014 5:09 PM, fi...@vivaldi.net wrote: Hya, I've seen docs that show how to configure OSSEC to work with IPTables, the firewall application used in the firewall-drop.sh script. On Linux distributions that use UFW as the default firewall application, what are the steps that need to

Re: [ossec-list] Monitoring /var/ossec

2014-11-30 Thread dan (ddp)
On Nov 30, 2014 5:22 PM, fi...@vivaldi.net wrote: Hi, In a test installation, I noticed that if I add /var/ossec directory in the list of directories that syscheck should monitor, disk usage speeds up really fast. In less than 2 hours, disk usage on on a test system doubled. What's the best

Re: [ossec-list] Monitoring /var/ossec

2014-11-30 Thread Eero Volotinen
2014-12-01 0:20 GMT+02:00 fi...@vivaldi.net: Hi, In a test installation, I noticed that if I add /var/ossec directory in the list of directories that syscheck should monitor, disk usage speeds up really fast. In less than 2 hours, disk usage on on a test system doubled. What's the best

Re: [ossec-list] OSSEC and UFW

2014-11-30 Thread finid
Modifying the firewall script to use ufw is something I can take a crack at, but no right now. -- finid On 2014-11-30 16:29, dan (ddp) wrote: On Nov 30, 2014 5:09 PM, fi...@vivaldi.net wrote: Hya, I've seen docs that show how to configure OSSEC to work with IPTables, the firewall

Re: [ossec-list] Monitoring /var/ossec

2014-11-30 Thread Michael Starks
On 11/30/2014 04:20 PM, fi...@vivaldi.net wrote: Hi, In a test installation, I noticed that if I add /var/ossec directory in the list of directories that syscheck should monitor, disk usage speeds up really fast. In less than 2 hours, disk usage on on a test system doubled. What's the

Re: [ossec-list] Monitoring /var/ossec

2014-11-30 Thread finid
On 2014-11-30 17:39, Michael Starks wrote: On 11/30/2014 04:20 PM, fi...@vivaldi.net wrote: Hi, In a test installation, I noticed that if I add /var/ossec directory in the list of directories that syscheck should monitor, disk usage speeds up really fast. In less than 2 hours, disk usage on