Re: [ossec-list] Cannot OSSEC to MySQL Server

2015-03-21 Thread Eero Volotinen
2015-03-21 19:18 GMT+02:00 Network Infrastructure panhatiger...@gmail.com: Help me please! I installed and configured OSSEC on CentOS 6.6 and also install XAMPP 1.8.1 to sent report to MySQL Server but I got error as below: ossec-dbd(5202): ERROR: Error connecting to database

[ossec-list] Cannot OSSEC to MySQL Server

2015-03-21 Thread Network Infrastructure
Help me please! I installed and configured OSSEC on CentOS 6.6 and also install XAMPP 1.8.1 to sent report to MySQL Server but I got error as below: ossec-dbd(5202): ERROR: Error connecting to database 'xxx.xxx.xxx.xxx'(ossec): ERROR: Can't connect to MySQL server on 'xxx.xxx.xxx.xxx' (110).

Re: [ossec-list] Cannot OSSEC to MySQL Server

2015-03-21 Thread Network Infrastructure
In ossec manager I config: # tar -zxvf ossec-hids-*.tar.gz (or gunzip -d; tar -xvf) # cd ossec-hids-* # cd src; make setdb; cd .. # ./install.sh # /var/ossec/bin/ossec-control enable database # /opt/lampp/bin/mysql -u root mysql create database ossec; mysql grant

Re: [ossec-list] ERROR: Queue

2015-03-21 Thread dan (ddp)
On Mar 21, 2015 3:36 PM, Nhen Panha panhan...@gmail.com wrote: When I config ossec, I always error these: ERROR: Queue '/queue/alerts/ar' not accessible: 'Connection refused'. ossec-analysisd(1301): ERROR: Unable to connect to active response queue. If you're not using active response,

Re: [ossec-list] Cannot OSSEC to MySQL Server

2015-03-21 Thread dan (ddp)
On Mar 21, 2015 3:03 PM, Network Infrastructure panhatiger...@gmail.com wrote: In ossec manager I config: # tar -zxvf ossec-hids-*.tar.gz (or gunzip -d; tar -xvf) # cd ossec-hids-* # cd src; make setdb; cd .. # ./install.sh # /var/ossec/bin/ossec-control enable database #

Re: [ossec-list] Cannot OSSEC to MySQL Server

2015-03-21 Thread Eero Volotinen
Is telnet 127.0.0.1 3306 working? No connection refused reply? Eero 21.3.2015 7.36 ip. kirjoitti Network Infrastructure panhatiger...@gmail.com: Help me please! I installed and configured OSSEC on CentOS 6.6 and also install XAMPP 1.8.1 to sent report to MySQL Server but I got error as

[ossec-list] Re: ERROR: Queue

2015-03-21 Thread Nhen Panha
I think I also use auto response that is the configuration: !-- Active Response Config -- active-response !-- This response is going to execute the host-deny - command for every event that fires a rule with - level (severity) = 6. - The IP is going to be blocked for

[ossec-list] ERROR: Queue

2015-03-21 Thread Nhen Panha
When I config ossec, I always error these: ERROR: Queue '/queue/alerts/ar' not accessible: 'Connection refused'. ossec-analysisd(1301): ERROR: Unable to connect to active response queue. Thank for your help! -- --- You received this message because you are subscribed to the Google

[ossec-list] Re: ERROR: Queue

2015-03-21 Thread Nhen Panha
I'm a new user that user ossec when I config ossec I always see these message. I would like to ask you what's wrong? ossec-analysisd(1210): ERROR: Queue '/queue/alerts/ar' not accessible: 'Connection refused'. ossec-analysisd(1301): ERROR: Unable to connect to active response queue.

Re: [ossec-list] OSSEC 2.9 Release Date?

2015-03-21 Thread dan (ddp)
On Mar 19, 2015 7:04 PM, DefensiveDepth joshbro...@gmail.com wrote: Greetings all, I just wanted to see if there is an estimated release date for 2.9? I will be releasing some research/decoder/rulesets in the next couple weeks for using OSSEC Sysmon, but unfortunately, it will not be usable

Re: [ossec-list] Re: Ossec_Snort false positive 20101

2015-03-21 Thread dan (ddp)
On Mar 19, 2015 9:54 PM, Zakirasafi zakiras...@gmail.com wrote: I have one confusion... Ossec and snort are two different thing then why you are using both at the same time. kindly I need your explanation Perhaps to watch network traffic and syatem/application logs. Thanks and Regards,

Re: [ossec-list] Re: ERROR: Queue

2015-03-21 Thread dan (ddp)
On Mar 21, 2015 4:08 PM, Nhen Panha panhan...@gmail.com wrote: I think I also use auto response that is the configuration: Is ossec-execd running? Do you get any errors when you run: ossec-execd -d !-- Active Response Config -- active-response !-- This response is going to execute

[ossec-list] Re: ERROR: Queue

2015-03-21 Thread Nhen Panha
When I run: ossec-execd -d. It don't show anything. On Sunday, March 22, 2015 at 2:36:52 AM UTC+7, Nhen Panha wrote: When I config ossec, I always error these: ERROR: Queue '/queue/alerts/ar' not accessible: 'Connection refused'. ossec-analysisd(1301): ERROR: Unable to connect to active

Re: [ossec-list] Re: ERROR: Queue

2015-03-21 Thread dan (ddp)
On Mar 21, 2015 5:03 PM, Nhen Panha panhan...@gmail.com wrote: When I run: ossec-execd -d. It don't show anything. Check the ossec.log. On Sunday, March 22, 2015 at 2:36:52 AM UTC+7, Nhen Panha wrote: When I config ossec, I always error these: ERROR: Queue '/queue/alerts/ar' not

[ossec-list] Re: Cannot OSSEC to MySQL Server

2015-03-21 Thread Network Infrastructure
Thank you for your support. It now working normally and it cause from my MySQL Server. Thank you very much. On Sunday, March 22, 2015 at 12:36:06 AM UTC+7, Network Infrastructure wrote: Help me please! I installed and configured OSSEC on CentOS 6.6 and also install XAMPP 1.8.1 to sent

[ossec-list] Re: ERROR: Queue

2015-03-21 Thread Nhen Panha
I restart the ossec services and then I check the ossec.log. It show like that: ossec-analysisd(1210): ERROR: Queue '/queue/alerts/ar' not accessible: 'Connection refused'. ossec-analysisd(1301): ERROR: Unable to connect to active response queue. On Sunday, March 22, 2015 at 2:36:52 AM UTC+7,

[ossec-list] Re: ERROR: Queue

2015-03-21 Thread Nhen Panha
When I ran command ossec-execd It didn't show any messages from ossec-execd. I'm not sure it running or not. The version of ossec is 2.8.1. On Sunday, March 22, 2015 at 2:36:52 AM UTC+7, Nhen Panha wrote: When I config ossec, I always error these: ERROR: Queue '/queue/alerts/ar' not

[ossec-list] Re: ERROR: Queue

2015-03-21 Thread Nhen Panha
I don't what to check. Could you tell me everything that i need to check? On Sunday, March 22, 2015 at 2:36:52 AM UTC+7, Nhen Panha wrote: When I config ossec, I always error these: ERROR: Queue '/queue/alerts/ar' not accessible: 'Connection refused'. ossec-analysisd(1301): ERROR: Unable

Re: [ossec-list] Re: ERROR: Queue

2015-03-21 Thread dan (ddp)
On Mar 21, 2015 5:20 PM, Nhen Panha panhan...@gmail.com wrote: I restart the ossec services and then I check the ossec.log. It show like that: ossec-analysisd(1210): ERROR: Queue '/queue/alerts/ar' not accessible: 'Connection refused'. ossec-analysisd(1301): ERROR: Unable to connect to active

Re: [ossec-list] Re: ERROR: Queue

2015-03-21 Thread dan (ddp)
On Mar 21, 2015 5:47 PM, Nhen Panha panhan...@gmail.com wrote: When I ran command ossec-execd It didn't show any messages from ossec-execd. I'm not sure it running or not. The version of ossec is 2.8.1. You should check. On Sunday, March 22, 2015 at 2:36:52 AM UTC+7, Nhen Panha wrote:

Re: [ossec-list] Re: ERROR: Queue

2015-03-21 Thread dan (ddp)
On Mar 21, 2015 6:42 PM, Nhen Panha panhan...@gmail.com wrote: I don't what to check. Could you tell me everything that i need to check? Probably not, not all at once anyway. Troubleshooting rarely works that way. I'd start by checking whether ossec-execd is running. Check permissions and