Re: [ossec-list] OSSEC installation error cc: error trying to exec 'as': execvp

2015-11-16 Thread Edward
I see what you mean, I already searched for "as" before sending my post. There is no "as" package. Probably it is named something else? I really do think I am missing a package because I had also issues sometime ago with other servers and at the end it was installing the correct packages. It

Re: [ossec-list] OSSEC installation error cc: error trying to exec 'as': execvp

2015-11-16 Thread Eero Volotinen
I think assembler 'as' is missing. 16.11.2015 4.41 ip. "Edward" kirjoitti: > I am trying to install ossec agent (2.8.1) on sles 11 sp1 and when running > the ./install.sh I get this error: > > cc: error trying to exec 'as': execvp: No such file or directory > > I did

Re: [ossec-list] OSSEC installation error cc: error trying to exec 'as': execvp

2015-11-16 Thread Eero Volotinen
Well, i am not so familiar with suse package manager. http://software.opensuse.org/package/ossec-hids Maybe that repo providers needed packages? Eero 16.11.2015 6.38 ip. "Edward" kirjoitti: > I see what you mean, I already searched for "as" before sending my post. >

Re: [ossec-list] OSSEC installation error cc: error trying to exec 'as': execvp

2015-11-16 Thread Edward
Thx for the link, I have already seen that one, but this version is unstable and also for sles 11 sp3 , I have sp1 anyway, I did the install the rpm package... rpm -Uhv ossec-hids-2.8.1-1.1.src.rpm warning: ossec-hids-2.8.1-1.1.src.rpm: Header V3 DSA signature: NOKEY, key ID ee454f98

[ossec-list] Re: Create an alert for NTP offset

2015-11-16 Thread Robert Micallef
The decoder mentioned earlier sometimes picked the wrong thing. This so far is working well: ossec 'ntp-alert':\.+\s+\S+\s+\S+\s+\S+\s+\S+\s+\S+\s+\S+\s+\S+\s+ ^(\p\d\d\d\d)|(\d\d\d\d) extra_data -- --- You received this message because you are subscribed to the Google Groups

Re: [ossec-list] OSSEC installation error cc: error trying to exec 'as': execvp

2015-11-16 Thread Edward
and how do I install this assembler ? On Monday, November 16, 2015 at 5:00:30 PM UTC+1, Eero Volotinen wrote: > > I think assembler 'as' is missing. > 16.11.2015 4.41 ip. "Edward" kirjoitti: > >> I am trying to install ossec agent (2.8.1) on sles 11 sp1 and when >> running

Re: [ossec-list] OSSEC installation error cc: error trying to exec 'as': execvp

2015-11-16 Thread Eero Volotinen
Well, using package manager? It depends on distribution. Usually you can use package manager search functionality to find out name of package. Eero 16.11.2015 6.23 ip. "Edward" kirjoitti: > and how do I install this assembler ? > > On Monday, November 16, 2015 at 5:00:30

Re: [ossec-list] ossec-logtest returns Level 0 but still getting email alerts Level 2

2015-11-16 Thread Daniel Bray
On Friday, November 13, 2015 at 2:30:24 PM UTC-5, Pedro S. wrote: > > Okay try this: > > Temporaly remove "alert_by_email" from rule 1002 on > syslog_rules.xml. > Now add "alert_by_email" in your custom rule. > Restart OSSEC and generate the alert. > > What im trying here is to stop OSSEC from

[ossec-list] OSSEC installation error cc: error trying to exec 'as': execvp

2015-11-16 Thread Edward
I am trying to install ossec agent (2.8.1) on sles 11 sp1 and when running the ./install.sh I get this error: cc: error trying to exec 'as': execvp: No such file or directory I did install make and gcc-c++ , but I have the feeling I am missing packages in /var/log/messages I dont see any logs

Re: [ossec-list] ossec-logtest returns Level 0 but still getting email alerts Level 2

2015-11-16 Thread Daniel Bray
On Monday, November 16, 2015 at 7:47:24 AM UTC-5, Daniel Bray wrote: > > OK, I'm a little lost as to what this is trying to prove, but the updated > settings are in place. I'm waiting for an alert to come through. > > With the updated alert_by_email settings, this has stopped the email alerts.

Re: [ossec-list] OSSEC installation error cc: error trying to exec 'as': execvp

2015-11-16 Thread Eero Volotinen
You installed wrong package. src.rpm is source package. you need to install correct package: http://download.opensuse.org/repositories/server:/monitoring/SLE_11_SP3/i586/ossec-hids-2.8.1-1.1.i586.rpm is for 32bit architecture and

Re: [ossec-list] OSSEC installation error cc: error trying to exec 'as': execvp

2015-11-16 Thread Edward
I think the package is not correct , seems I have to go back to the manuall installation and find the missing package On Monday, November 16, 2015 at 6:48:49 PM UTC+1, Edward wrote: > > rpm -qa |grep ossec > ossec-hids-2.8.1-1.1 > > > ossec seems to be installed and it has created this

Re: [ossec-list] OSSEC installation error cc: error trying to exec 'as': execvp

2015-11-16 Thread Edward
nevermind, the package has not been installed and probably its not for sles11sp1: rpm -q ossec-hids-2.8.1-1.1.src.rpm package ossec-hids-2.8.1-1.1.src.rpm is not installed On Monday, November 16, 2015 at 6:03:27 PM UTC+1, Edward wrote: > > Thx for the link, I have already seen that one, but

Re: [ossec-list] OSSEC installation error cc: error trying to exec 'as': execvp

2015-11-16 Thread Eero Volotinen
well, package name does not contain 'x86_64.rpm' rpm -q ossec-hids should be enought. or rpm -qa |grep ossec to find out package name. Eero 2015-11-16 19:36 GMT+02:00 Edward : > thx Eero, > > I did realize that and did get the correct package: > rpm -Uhv

Re: [ossec-list] OSSEC installation error cc: error trying to exec 'as': execvp

2015-11-16 Thread Edward
thx Eero, I did realize that and did get the correct package: rpm -Uhv ossec-hids-2.8.1-1.1.x86_64.rpm warning: ossec-hids-2.8.1-1.1.x86_64.rpm: Header V3 DSA signature: NOKEY, key ID ee454f98 Preparing...### [100%] package

Re: [ossec-list] OSSEC installation error cc: error trying to exec 'as': execvp

2015-11-16 Thread Edward
rpm -qa |grep ossec ossec-hids-2.8.1-1.1 ossec seems to be installed and it has created this directory: /var/lib/ossec I tried to get the status /etc/init.d/ossec-hids status /var/lib/ossec/bin/ossec-control not installed The directory /var/lib/ossec doesn't contain the much, the

Re: [ossec-list] OSSEC installation error cc: error trying to exec 'as': execvp

2015-11-16 Thread Eero Volotinen
Well, I extracted buildrequirements from source packages and they look like this: *BuildReq*uires: coreutils *BuildReq*uires: zlib-devel-static *BuildReq*uires: zlib-devel *BuildReq*uires: glibc-devel *BuildReq*uires: openssl-devel *BuildReq*uires: mysql-devel *BuildReq*uires: