Its not listing is ossec.log but lsusb detects it. Is there anyother log I should look into?
On Saturday, May 17, 2014 1:50:21 AM UTC+5:30, dan (ddpbsd) wrote: > > > On May 16, 2014 4:19 PM, "Ashok" <ashokku...@gmail.com <javascript:>> > wrote: > > > > Yes I did > > > > Can you provide a log sample? > > > > > On Saturday, May 17, 2014 12:55:45 AM UTC+5:30, Ashok wrote: > >> > >> I tried to overwrite the predefined external storage detection code by > including the following in local_rules.xml > >> > >> <rule id="532" level="0" overwrite="yes" > > >> <if_sid>531</if_sid> > >> <match>cdrom|/media|usb|/mount|floppy|dvd</match> > >> <description>Detected external medias.</description> > >> </rule> > >> > >> > >> But its not detecting usb storage.. > > > > -- > > > > --- > > You received this message because you are subscribed to the Google > Groups "ossec-list" group. > > To unsubscribe from this group and stop receiving emails from it, send > an email to ossec-list+...@googlegroups.com <javascript:>. > > For more options, visit https://groups.google.com/d/optout. > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
