[Ossec-list] Syscheck doesn't seem to work ?

[fcr-mailings at nerim.net (Fred)]

Hello,

Well, I installed one agent and one server for tests.

Problem is that system integrity doesn't seem to work:

	1) on agent, I use:
		- frequency=60
		- directories=/etc/hosts (tried with /etc too)
	2) I modify /etc/hosts, wait 2 minutes, then modify again
/etc/hosts, wait 2 minutes again
	3) I don't have any reporting emails...?

I'm sure email reporting works: if I run "tcpdump" on agent machine, server
sends an alert email.

Some informations:

	- I run OSSEC HIDS 0.6p1
	- Syscheckd is not "on" on server. Should I ? Only agent is
interesting me.

Thanks for your help.

Fred