Hi Dan: The openssl-devel helped on several agents.
However, on one agent where that library was already installed, the installation only gets as far as the below: *** Making syscheckd *** make[1]: Entering directory `/usr/local/src/ossec-hids/src/syscheckd' gcc -g -Wall -I../ -I../headers -DDEFAULTDIR=\"/var/ossec\" -DCLIENT - DUSE_OPENSSL -DUSEINOTIFY -DARGV0=\"ossec-syscheckd\" -DXML_VAR= \"var\" -DOSSECHIDS syscheck.c config.c seechanges.c run_realtime.c create_db.c run_check.c ../config/lib_config.a ../rootcheck/ rootcheck_lib.a ../shared/lib_shared.a ../os_xml/os_xml.a ../os_regex/ os_regex.a ../os_net/os_net.a ../os_crypto/os_crypto.a -o ossec- syscheckd run_realtime.c:40:25: sys/inotify.h: No such file or directory run_realtime.c: In function `realtime_start': run_realtime.c:136: warning: implicit declaration of function `inotify_init' run_realtime.c: In function `realtime_adddir': run_realtime.c:167: warning: implicit declaration of function `inotify_add_watch' run_realtime.c:169: error: `IN_MODIFY' undeclared (first use in this function) run_realtime.c:169: error: (Each undeclared identifier is reported only once run_realtime.c:169: error: for each function it appears in.) run_realtime.c:169: error: `IN_ATTRIB' undeclared (first use in this function) run_realtime.c:169: error: `IN_MOVED_TO' undeclared (first use in this function) run_realtime.c:169: error: `IN_DELETE' undeclared (first use in this function) run_realtime.c:169: error: `IN_MOVED_FROM' undeclared (first use in this function) run_realtime.c: In function `realtime_process': run_realtime.c:207: error: invalid application of `sizeof' to incomplete type `inotify_event' run_realtime.c:210: error: invalid application of `sizeof' to incomplete type `inotify_event' run_realtime.c:213: error: invalid application of `sizeof' to incomplete type `inotify_event' run_realtime.c:224: error: dereferencing pointer to incomplete type run_realtime.c:232: error: dereferencing pointer to incomplete type run_realtime.c:236: error: dereferencing pointer to incomplete type run_realtime.c:240: error: invalid application of `sizeof' to incomplete type `inotify_event' run_realtime.c:240: error: dereferencing pointer to incomplete type make[1]: *** [syscheck] Error 1 make[1]: Leaving directory `/usr/local/src/ossec-hids/src/syscheckd' Error Making syscheckd make: *** [all] Error 1 Error 0x5. Building error. Unable to finish the installation. How can I fix the above? The agent is running CentOS 4.9. Thank you.