[ossec-list] Re: New to OSSEC HIDS

["Daniel Cid" <daniel.cid@xxxxxxxxx>]

I just added it. Can you guys try:

http://www.ossec.net/files/ossec-hids-0.8-3.tar.gz

to see if it is working properly? It should add the hostname in the
subject and also before the log location on the local messages.

Thanks for the suggestions!

--
Daniel B. Cid
dcid @ ( at ) ossec.net

On 6/9/06, Leslie S Arvin <arvin@xxxxxxxxxx> wrote:
>
> I'd like to see it, and have already hacked this into the email subject
> for Solaris and RedHat. But I don't know that my hack is cross-platform
> compatible.  I used uname(2).
>
> -- Leslie Arvin
>     arvin@xxxxxxxxxx, Office: FREH G409, Phone: 765-496-3971
>     Network Systems Administrator, ITI-Unix Platforms
>     Purdue University, Information Technology at Purdue
>
>
> Bill Long wrote:
> > Hey folks,
> >
> > I've just recently installed OSSEC HIDS on 3 of my unix machines. I LOVE
> > it. I do have one question though. I can't tell which server the emails
> > are coming from without looking at the actual email address(ie, the
> > FROM: header only shows OSSEC HIDS until I click the actual email). I'd
> > like to have some way to have the machine name show up either in the
> > subject or the FROM: header. I took a quick look at the code and it's an
> > easy fix to do that, but wanted to make sure it wasn't already
> > implemented some way.
> >
> > If it's not, is it something anybody else would be interested in having?
> >
> > thanks much,
> >
> > bill
> >
> >
> >
>
> >
>

--~--~---------~--~----~------------~-------~--~----~
-~----------~----~----~----~------~----~------~--~---