George Lantz wrote: > We have several ossec servers running. We are testing now, and last > night I checked and some of the daemons where off, and it was different > for each server. Just curious if there is somewhere that explains what > each daemon handles. I think I can guess what each one does, but just so > I have a better understanding of the application I would like to know > exactly. Also, in all the installations I have done so far "ossec-execd > not running" is shown for all of them. I do have active response turned > off, so I am guessing this is why?
Hello George, This should help: http://ossec.net/wiki/index.php/Ossec_logic Regards, Mike