Re: [ossec-list] Test

2016-10-15 Thread dan (ddp)
On Oct 15, 2016 10:51 AM, "Herman Harperink" wrote: > > Posted two times here, don't see my posts. Please ignore / delete. > I was asleep for the first one, and had a rushy sort of morning. They're posted now, and I'll try harder in the future. > -- > > --- > You

[ossec-list] Test

2016-10-15 Thread Herman Harperink
Posted two times here, don't see my posts. Please ignore / delete. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com.

[ossec-list] Test script for ossec ids on apache logs?

2014-12-24 Thread Glenn Ford
Hello All! Thanks to Dan I have a basic setup in place. I'd like to verify/test the IDS is working properly for my apache logs. Is there a test attack script people use to flex the OSSEC IDS component on apache logs? I could just run a dynamic pen test scanner (ibm appscan,etc) I guess? TIA!

[ossec-list] Test active-response doesn't work

2013-06-10 Thread Ubertino Da Casale
Good morning, OSSEC 2.7 Centos 6 Plesk 11 Trying to test active-response: Rule created and working: 15, group spam, level 13 File /var/ossec/active-response/bin/test.sh duplicates restart-ossec.sh, root:ossec 550 Command: *command* *nametest-ar/name* *executabletest.sh/executable* *expect

Re: [ossec-list] Test active-response doesn't work

2013-06-10 Thread dan (ddp)
On Mon, Jun 10, 2013 at 5:16 AM, Ubertino Da Casale ubertinodacas...@gmail.com wrote: Good morning, OSSEC 2.7 Centos 6 Plesk 11 Trying to test active-response: Rule created and working: 15, group spam, level 13 File /var/ossec/active-response/bin/test.sh duplicates restart-ossec.sh,

Re: [ossec-list] Test active-response doesn't work

2013-06-10 Thread Ubertino Da Casale
Solved. Permissions are 550 root:ossec but the problem is due to editor. I using server panel online editor (Plesk) which inserts extra ctrl char no visibles in code, changing editor solve the problem. Thank you very much. El lunes, 10 de junio de 2013 15:08:24 UTC+2, dan (ddpbsd) escribió: