I only have a limited knowledge of IP cop and am planning to deploy it. Could this not be out as a add on module for IP cop? I would be very interested in the details on how you did this. Dennis
----- Original Message ----- From: [email protected] <[email protected]> To: [email protected] <[email protected]> Sent: Wed Jan 10 21:40:14 2007 Subject: [ossec-list] Re: OSSEC on IPCop Daniel Cid wrote: > Ossec by default will be configured to use /var/ossec, but you can modify > that during compilation time by editing the file src/Config.OS (on the > build > box). To have ossec on /var/log/ossec, just add the following: > > CEXTRA= -DDEFAULTDIR=\"/var/log/ossec\" > > And make sure to set the preloaded-vars.conf file properly (for the binary > install): > > USER_BINARYINSTALL="y" > USER_DIR="/var/log/ossec" This worked just about perfectly. The only manual step I had to perform was to copy the binaries into the ../bin directory. I've started a write-up for the Wiki and will get it posted when I get a chance. Thanks again.
