[ossec-dev] Re: ossec-syscheckd and ossec-rootcheck

["Robert Millan [ackstorm]" <robert.millan@xxxxxxxxxxx>]

On Fri, Mar 23, 2007 at 08:30:20PM -0400, Daniel Cid wrote:
> Hi Robert,
> 
> I thought you were talking about the server. On the agent side, "agentd" is 
> the
> only reader (it forwards everything to the server).
> 
> Hope it helps.

Thank you.  It seems that agentd failed to run because it was not configured.

Note that the "By Hand Installation steps" are not currently a valid replacement
for the canonical install method.  It seems they got out of sync and it's
missing stuff (too many changes I lost track of them -- sorry).

I only managed to repair my install by doing a "normal" install in a chroot
and comparing the whole tree with another chroot that had the "by hand" method
used.

I would recommend removing the "by hand" reference to avoid confusion.

-- 
Robert Millan

ACK STORM, S.L.  -  http://www.ackstorm.es/