On Thu, Dec 6, 2012 at 9:48 PM, peng lin <[email protected]> wrote: > https://groups.google.com/forum/?fromgroups#!topic/ossec-list/yQpi0f7tPMY > conf file in that link > i have let it work with run ./ossec-remote . now it works good. but i only > doubt why it not auto run this directive.when i start it
Check ossec.log. There should be something in there about ossec-remoted. The "syslog" remote connection you have defined in the ossec.conf doesn't include allowed-ips, but if you aren't sending messages to the server via syslog then you don't even need that section. > On Friday, December 7, 2012 3:53:37 AM UTC+8, dan (ddpbsd) wrote: >> >> On Wed, Dec 5, 2012 at 6:18 AM, peng lin <[email protected]> wrote: >> > when i use netstat -antlup i saw a ossec-remoted in server >> > so in hybrid server i run ./ossec-remoted so agent can connect to hybrid >> > mode. >> > but why ossec-remoted not run auto ? is it a bug ? >> >> No idea, you didn't provide any information for us to troubleshoot this >> issue. >> >> Do the logs help? Do you have an ossec.conf to share?
