Can you send a diff of your modifications against the official package? A diff -r should work...
It seems that either SUBJECT_SIZE or MAIL_SUBJECT are incorrectly set there, causing it to fail (probably by mistake when editing the files). thanks, -- Daniel B. Cid http://dcid.me On Wed, Mar 28, 2012 at 2:00 PM, MDACC-Luckie <luckief...@gmail.com> wrote: > I don't see any anomalies in my keys. As far as limits on the user > running ossec, there are none. My max length server name is 15 > characters. I am not proficient enough with my programming skills to > go into the code and modify to provide any enhanced logging, mainly > because I haven't had the need or the time to do it. I guess I could > learn but definitely doesn't help with the immediate issue. > > How complicated is it or is it even possible for me to take a copy of > specific files that might hold key information, reinstall, and then > use that backed up key information in a vanilla installation to see if > that fixes anything? If so, what files? > > Thanks again for all your help on this.