Hi Charlie,
I have a box that has an ossec agent on it right now. Maybe I'll reinstall it as a local dev install and play around a bit.
Tha'ts a good idea. Having the local install is much easier to play with it..
Sure. If nothing else, I can grab a daily snapshot to know where things stand. I don't know whether this is all run out of your garage, or if it's a little more sophisticated than that ;-), but a couple of suggestions: * daily/nightly cvs-diff to ossec-dev list * daily snapshot available on the website The latter (for me) would be solved by granting me cvs access. And I could probably automate the former with cvs access, but it should probably come from the cvs server itself. There may not be any "general public" interest in either of these, but I'm just putting it out there.
The cvs is really run out of my "garage" (well, a small roon in my apt). It is also setup to send e-mails for every cvs commit. Do you guys think it is a good idea to send these e-mails to this list? I also liked the idea of daily cvs-diffs to the list.. If you can do that for us would be great. *I try to post snapshots in the website: http://www.ossec.net/files/snapshots/ but it is not as frequent as I would hope. *I sent the cvs information to your e-mail.. -- Daniel B. Cid dcid ( at ) ossec.net