On Mon, Mar 30, 2020 at 2:11 PM Glen Peterson <glen.k.peter...@gmail.com> wrote: > > I installed on Ubuntu 18.04 with according to this: > https://www.ossec.net/downloads/#apt-automated-installation-on-ubuntu-and-debian > > I installed both agent and server. Specifically: > $ wget -q -O - https://updates.atomicorp.com/installers/atomic | sudo bash > > $ sudo apt update > > $ sudo apt install ossec-hids-server > $ sudo apt install ossec-hids-agent >
They should be mutually exclusive, so I'm guessing the agent removed the server. > $ sudo -u ossec ssh-keygen > > $ sudo vim /var/ossec/etc/client.keys > 001 server1 any <some-passphrase-you-save-in-keepass> > > $ sudo chown root.ossec /var/ossec/etc/client.keys > > Then I edited ossec.conf as I wrote in my previous mail and started the > server. > > $ sudo /var/ossec/bin/ossec-control start > Starting OSSEC HIDS v3.6.0... > Started ossec-execd... > 2020/03/30 14:05:04 ossec-agentd: INFO: Using notify time: 600 and max time > to reconnect: 1800 > 2020/03/30 14:05:04 going daemon > Started ossec-agentd... > Started ossec-logcollector... > Started ossec-syscheckd... > Completed. > > > > On Monday, March 30, 2020 at 2:01:35 PM UTC-4, dan (ddpbsd) wrote: >> >> On Mon, Mar 30, 2020 at 2:00 PM Glen Peterson <glen.k...@gmail.com> wrote: >> > >> > Sorry to be dense. I just tried to post another message and don't see it >> > in google groups. I'm noticing that other people have an ossec-maild, but >> > I don't: >> > $ sudo ls -l /var/ossec/bin/ >> > total 1164 >> > -r-xr-x--- 1 root ossec 149632 Mar 15 15:02 agent-auth >> > -r-xr-x--- 1 root ossec 153728 Mar 15 15:02 manage_agents >> > -r-xr-x--- 1 root ossec 276704 Mar 15 15:02 ossec-agentd >> > -r-xr-x--- 1 root ossec 4593 Feb 14 14:46 ossec-control >> > -r-xr-x--- 1 root ossec 63504 Mar 15 15:02 ossec-execd >> > -r-xr-x--- 1 root ossec 235840 Mar 15 15:02 ossec-logcollector >> > -r-xr-x--- 1 root ossec 284864 Mar 15 15:02 ossec-syscheckd >> > -r-xr-x--- 1 root ossec 4503 Feb 14 14:46 util.sh >> > >> > I just installed ossec for the first time over the weekend. I can't seem >> > to get it to send mail. Am I missing an executable? >> > >> >> This looks like an agent installation. The OSSEC server handles >> sending out email. >> >> > -- >> > >> > --- >> > You received this message because you are subscribed to the Google Groups >> > "ossec-list" group. >> > To unsubscribe from this group and stop receiving emails from it, send an >> > email to ossec...@googlegroups.com. >> > To view this discussion on the web visit >> > https://groups.google.com/d/msgid/ossec-list/3d55b1e6-ae3d-4030-9cf2-30872ea7557f%40googlegroups.com. > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to ossec-list+unsubscr...@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/ossec-list/15f1956a-8065-4e5e-9dae-c428cb7f02e7%40googlegroups.com. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/ossec-list/CAMyQvMqommpAOt%3D7BY7qkfRDjATx6-ieQigKt8sUHxd_9YLAUg%40mail.gmail.com.
