-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 03/21/2011 05:29 PM, Eric Hansen wrote: > Nah, I'm using Arch Linux which doesn't include anything beyond the > core files needed for Bash and Linux, and I really dislike (to put it > nicely) SELinux.
You know, if you want help, you're really going to have to have one of the problems I'm describing so we can fix it.. ;) Ok.. Let me re-iterate so I understand the problem.. Your server (not agent) won't bind to port 1514/UDP. Is that correct? The error you see in the logs : "ERROR: Unable to create merged file: '/etc/shared/merged.mg'." is on the server, correct? What are the permissions on the /etc/shared ... wait.. /etc/shared? Did you relocate the ossec install? That should be /var/ossec/etc/shared ... Where is OSSEC installed? What are the permissions on the shared directory (wherever it is) ? It appears that remoted isn't running, perhaps because of directory permissions problems. On my install, the shared directory is owned by ossec.ossec and has permissions of 770 . - -- - --------------------------- Jason 'XenoPhage' Frisvold xenoph...@godshell.com - --------------------------- "Any sufficiently advanced magic is indistinguishable from technology." - - Niven's Inverse of Clarke's Third Law -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.16 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAk2IuLwACgkQ8CjzPZyTUTRpiQCeOtGypM3UaEKSbWEYNDL4kRCH OOQAn2GfNN4vn6p90jsLdG4snjmNctzk =/UMv -----END PGP SIGNATURE-----