Hi Kurt, thats my problem: i can see some actions at /var/ossec/queue/syscheck/daheim-server (the Windows Client).
The filesystem check at the Windows Client works well - i can see the md5sum and filename at /var/ossec/queue/syscheck/daheim-server: .... ... +++8282187:33279:0:0:ad5a7bb75f869b4b44432101f6907371:e0fab2b9f68947428b4fb23b6dba4fa09a87708f !1163366290 D:\Dokumente und Einstellungen\Administrator\Eigene Dateien/vlc-0.8.5-win32.exe +++135945992:33279:0:0:31bc929a5968eee0c1dc9d3d46b9d297:427c6d84a6b312f1f55c8b4cd3b04e376a4e98fb !1163366290 D:\Dokumente und Einstellungen\Administrator\Eigene Dateien/W2KSP4_DE.EXE ..... ... . but i can't see anything at /var/ossec/alerts/* no eventlog at the Linux Server :( Do you have any idea? Thanks for your answer!! :) Best Regards Fabian Kurt wrote: > I've got the agent running on Windows and it works ok for me. Are you looking > in /var/ossec/logs/alerts? Is your alerts.log file showing only events from > your server, and nothing from your Windows client? I'm trying to get a > clearer picture of what you're seeing (or *not* seeing). > > Kurt > perl -e "($_='tjgvlvsuAzbipp/dpn')=~s/(.)/chr(ord($1)-1)/ge;print" > ----- > Society doesn't understand me and technology fears me. > > ----- Original Message ---- > From: mohrenfabian <[EMAIL PROTECTED]> > To: [EMAIL PROTECTED] > Sent: Sunday, November 12, 2006 2:16:47 PM > Subject: [ossec-list] Question about the Windows Agent > > > Hello, > > i've installed a Server of my Archlinux Box - and the Agent on the > Windows machine. > > The Key is correct imported. I can see the right connection from the > client (/var/ossec/queue/agent-info) or with "list_agents -a". > > Under /var/ossec/queue/syscheck - i can see a logfile from the client (i > 've deleted some file - these files are listed). > > But i got no message at /var/ossec/log/....? > > Have anybody a idea? > > Best Regards > Fabian > > > > ___________________________________________________________ > Telefonate ohne weitere Kosten vom PC zum PC: http://messenger.yahoo.de > > > > > > > > ____________________________________________________________________________________ > Do you Yahoo!? > Everyone is raving about the all-new Yahoo! Mail beta. > http://new.mail.yahoo.com > ___________________________________________________________ Telefonate ohne weitere Kosten vom PC zum PC: http://messenger.yahoo.de
