[ossec-list] Re: Ossec failed after server reboot

["Daniel Cid" <daniel.cid@xxxxxxxxx>]

Hi Peter,

Can you send along some of your Sonicwall rules to us? I just added a
bunch of those
based on the logs you sent to me and they are available at the latest snapshot:

http://www.ossec.net/files/snapshots/ossec-hids-070902.tar.gz

If you can try it out and let us know how it goes...

Thanks,

--
Daniel B. Cid
dcid ( at ) ossec.net

On 8/31/07, Peter M. Abraham <peter.m.abraham@xxxxxxxxx> wrote:
>
> Greetings:
>
> I created a small number of sonicwall rules in /var/ossec/rules/
> local_rules.xml
>
> When I restarted ossec, it told me there was no "sonicwall" decoder.
>
> When I commented out the decoder section for "sonicwall" in /var/ossec/
> etc/decoder.xml I was told there is an error in the sonicwall decoder.
>
> I was not sure how to fix the error, but wanted to pass this along.
>
> Thank you.
>
> P.S.  I did privately email relevant sonicwall log info.
>
>