[ossec-list] Re: I don't seem to be getting emails about changed binaries

["Daniel Cid" <daniel.cid@xxxxxxxxx>]

Hi Kayvan,

You were right. I introduced a small bug on the -2 patch that caused
syscheckd to do not alert. It is fixed on the following patch:

http://www.ossec.net/files/ossec-hids-0.8-3.tar.gz

*Hopefully I didn't break anything this time.

Let me know if it fixes the problem. Logcollector not running
wouldn't cause the problem with syscheck.

Thanks!

--
Daniel B. Cid
dcid @ ( at ) ossec.net


On 6/8/06, Kayvan A. Sylvan <kayvan@xxxxxxxxxx> wrote:
> On Thu, Jun 08, 2006 at 05:02:49PM -0300, Daniel Cid wrote:
> >
> > How long did you wait for the alerts? Depending on how your
> > syscheck frequency is configured, it may take a while.
> > I will do some tests to see if I find a similar behavior in
> > here.
> >
> > Thanks for the report,
>
> It looks like my log collector had died (or failed to be restarted with
> the last install).
>
> [root@satyr ~]# service ossec status
> ossec-logcollector not running...         <----- HERE!
> ossec-syscheckd is running...
> ossec-analysisd is running...
> ossec-maild is running...
> ossec-execd is running...
>
> [root@satyr ~]# service ossec restart
> Stopping OSSEC:                                            [  OK  ]
> Starting OSSEC:                                            [  OK  ]
>
> [root@satyr ~]# service ossec status
> ossec-logcollector is running...
> ossec-syscheckd is running...
> ossec-analysisd is running...
> ossec-maild is running...
> ossec-execd is running...
>
>
> --
> Kayvan A. Sylvan          | Proud husband of       | Father to my kids:
> Sylvan Associates, Inc.   | Laura Isabella Sylvan, | Katherine Yelena (8/8/89)
> http://sylvan.com/~kayvan | my beautiful Queen.    | Robin Gregory (2/28/92)
>
>
>

--~--~---------~--~----~------------~-------~--~----~
-~----------~----~----~----~------~----~------~--~---