Great point David
Grant Leonard Castra Consulting, LLC <http://castraconsulting.com/#/> 919-949-4002 On Tue, Oct 14, 2014 at 12:00 PM, Rick McClinton <[email protected]> wrote: > David, > > I'm not confident that notepad, wordpad, or notepad++ wouldn't hide the > byte order marker at the start of a Unicode file. > > You mentioned scripting the creation of the key files; did you use > Powershell for this? In one of our (unrelated) projects, we learned we > needed to be sure to use the '-Encoding UTF-8' parameter to the 'out-file' > commandlet; as the default 'Unicode' would insert the byte order marker in > the output file. We were able to see the BOM when I opened the file with > GVIM and (IIRC) using the 'type' command, but some other editors did not > show it. > > > > HTH; > > Rick McClinton > > On Monday, October 13, 2014 8:58:07 PM UTC-4, David Masters wrote: >> >> I will try the process you suggest tomorrow. >> >> As for the rest: >> there are no duplicate IP's (all agents have been added with the "any" IP >> configuration) or ID's (all keys were deleted from the client.keys file >> (except 001) in order to prevent duplicates)(all rid's were deleted >> afterwards to make sure there weren't any issues there either, all done >> while the ossec services were stopped)). >> both files (client.keys and ossec.conf being pushed out) were examined in >> notepad, wordpad and notepad++ (multiple languanges) to verify there were >> no extra non-visible characters/line breaks/carriage returns present. >> >>> >>> -- > > --- > You received this message because you are subscribed to a topic in the > Google Groups "ossec-list" group. > To unsubscribe from this topic, visit > https://groups.google.com/d/topic/ossec-list/Zmfag8ajU3s/unsubscribe. > To unsubscribe from this group and all its topics, send an email to > [email protected]. > For more options, visit https://groups.google.com/d/optout. > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
