Daniel fixed this before the release of 2.7-beta0, he decided not storing Keepalives in archive.log.
On Friday, October 19, 2012 10:30:22 AM UTC-7, dan (ddpbsd) wrote: > > On Fri, Oct 19, 2012 at 1:28 PM, Courtney Grimland > <cgri...@cfa.harvard.edu <javascript:>> wrote: > > I found an old thread from Dec 2010 about a bug where the keepalive > messages > > being logged into archive.log had a scrambled string of characters at > the > > end. Daniel mentioned that it was a bug that had been fixed in the > latest > > snapshot at the time. > > > > I'm using version 2.6 from the ART repository (build 2.6-16, > specifically) > > and I'm still seeing messages like the following: > > > > 2012 Oct 19 12:05:35 eureka->ossec-keepalive --MARK--: > > > f.^YU;4v9u0qrtQp1I8PimU8^[AmTwBY7k4vc*/tfYJwAI'Jy2;H%[jX+=sInTPCmnf2/e-Rk$w;ppCO*8+h3MnaDF-/G)ASPFp]=TNQArIQ_!Mo]BvYvIgY$,e2&Eo$r*8XE3hn_Pl98X=3G0v1d^7y@@[dXX&%IT)vq[ITKb!mY1x/vSh#^%TUTNgYS-G]=u4W2UXUVBo1KLhnLo[uKNxLIDd]7=EhZQ3we8yhdN8N;^i(L > > > > > > Does this mean that the bug has re-surfaced, or that the most recent > (Aug > > 2012) ART package somehow does not include the bugfix? > > I feel like it popped up a couple of times between then and now. Not > seeing it in 2.7. >
