Hi Shawn,
you can compile OSSEC from sources without enabling GeoIP by following
these steps:
- Download OSSEC source code: git clone
https://github.com/ossec/ossec-hids.git
- Install GCC compiler and Make tool if you haven't them:
- sudo apt-get install gcc make [Debian/Ubuntu]
What I was trying to say...
Is there a way to install the OSSEC server package without the three GeoIP
packages? Also if I do not turn on the GeoIP functionality in the
ossec.conf file will the packages just sit dormant? I want to install the
least amount of additional packages to my web
I also see the above on a Linux box (Ubuntu 14).
On Tuesday, April 21, 2015 at 10:07:28 AM UTC-4, Bob Jolliffe wrote:
>
> I am seeing the following in my ossec.log on a linux agent:
>
> ossec-execd: INFO: Active response command not present:
> '/var/ossec/active-response/bin/restart-ossec.cmd'.
You may follow these steps:
1. Run the OSSEC installer and click "Next" until you reach the screen
"Choose the Install Location".
2. Select the directory where you want to install OSSEC in (another disk
partition).
3. Finish the installation steps.
4. At this point, OSSEC has
