On Fri, Sep 5, 2014 at 6:40 PM, Brian Kellogg <[email protected]> wrote: > <decoder>etc/local_decoder.xml</decoder> > <decoder>etc/decoder.xml</decoder> > > If I put the above in ossec.conf under rules the local_decoder.xml file > seems to work as it should. I looked through the decoder.xml file for the > pix decoders and I'm not sure why I had to do this. >
The ordering seems finicky sometimes. If there was an easy way to test the current samples we have, and if you were to provide samples, we could probably integrate your decoders into decoder.xml. > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
