[ossec-list] Unable to install OSSEC Agent

[Andy]

I am unable to install the ossec agent on a centos 7 server.  I get this 
error:
In file included from ./headers/shared.h:215:0,
 from client-agent/sendmsg.c:10:
./os_regex/os_regex.h:19:19: fatal error: pcre2.h: No such file or directory
 #include 

After installing pcre-devel, it still fails with this error. 

-- 

--- 
You received this message because you are subscribed to the Google Groups 
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ossec-list+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ossec-list/87a1b5ac-5b1d-476c-bda7-1c1dfc8cdae3%40googlegroups.com.

RE: [EXTERNAL] [ossec-list] Unable to install OSSEC Agent

['Vicente Munoz' via ossec-list]

If I’m not mistaken you have to add the following variable before being able to 
compile OSSEC in newer versions:

PCRE2_SYSTEM=yes

VR,
Vicente Muñoz (ACSE)

From: ossec-list@googlegroups.com  On Behalf Of 
Andy
Sent: Monday, April 20, 2020 11:10 AM
To: ossec-list 
Subject: [EXTERNAL] [ossec-list] Unable to install OSSEC Agent

I am unable to install the ossec agent on a centos 7 server.  I get this error:
In file included from ./headers/shared.h:215:0,
 from client-agent/sendmsg.c:10:
./os_regex/os_regex.h:19:19: fatal error: pcre2.h: No such file or directory
 #include 

After installing pcre-devel, it still fails with this error.
--

---
You received this message because you are subscribed to the Google Groups 
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to 
ossec-list+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ossec-list/87a1b5ac-5b1d-476c-bda7-1c1dfc8cdae3%40googlegroups.com.

-- 

--- 
You received this message because you are subscribed to the Google Groups 
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ossec-list+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ossec-list/BYAPR04MB6007D5187ACB317EB0035FD9CFD40%40BYAPR04MB6007.namprd04.prod.outlook.com.

Re: [EXTERNAL] [ossec-list] Unable to install OSSEC Agent

[Andy]

Where do I add this variable? 

On Monday, April 20, 2020 at 2:19:21 PM UTC-4, Vicente Munoz wrote:
>
> If I’m not mistaken you have to add the following variable before being 
> able to compile OSSEC in newer versions:
>
>  
>
> PCRE2_SYSTEM=*yes*
>
>  
>
> VR,
>
> *Vicente Muñoz (ACSE)*
>
> *From:* ossec...@googlegroups.com   > *On Behalf Of *Andy
> *Sent:* Monday, April 20, 2020 11:10 AM
> *To:* ossec-list >
> *Subject:* [EXTERNAL] [ossec-list] Unable to install OSSEC Agent
>
>  
>
> I am unable to install the ossec agent on a centos 7 server.  I get this 
> error:
>
> In file included from ./headers/shared.h:215:0,
>
>  from client-agent/sendmsg.c:10:
>
> ./os_regex/os_regex.h:19:19: fatal error: pcre2.h: No such file or 
> directory
>
>  #include 
>
>
> After installing pcre-devel, it still fails with this error. 
>
> -- 
>
> --- 
> You received this message because you are subscribed to the Google Groups 
> "ossec-list" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to ossec...@googlegroups.com .
> To view this discussion on the web visit 
> https://groups.google.com/d/msgid/ossec-list/87a1b5ac-5b1d-476c-bda7-1c1dfc8cdae3%40googlegroups.com
>  
> 
> .
>

-- 

--- 
You received this message because you are subscribed to the Google Groups 
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ossec-list+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ossec-list/c7fed188-a884-40cb-94be-59d01f2878df%40googlegroups.com.

Re: [EXTERNAL] [ossec-list] Unable to install OSSEC Agent

[Zach Vanderbilt]

Hey Andy,

You need to either need to rerun the install.sh with "PCRE2_SYSTEM=yes
./install.sh" or you can edit the makefile in /src. Since the build is
failing on that library already you probably just need to cd /src and "make
clean" and then reattempt installation. You could also delete the directory
you got after decompressing the tarball, decompress it again and then run
the installer.

Hope this helps!

On Mon, Apr 20, 2020 at 1:22 PM Andy  wrote:

> Where do I add this variable?
>
> On Monday, April 20, 2020 at 2:19:21 PM UTC-4, Vicente Munoz wrote:
>>
>> If I’m not mistaken you have to add the following variable before being
>> able to compile OSSEC in newer versions:
>>
>>
>>
>> PCRE2_SYSTEM=*yes*
>>
>>
>>
>> VR,
>>
>> *Vicente Muñoz (ACSE)*
>>
>> *From:* ossec...@googlegroups.com  *On Behalf
>> Of *Andy
>> *Sent:* Monday, April 20, 2020 11:10 AM
>> *To:* ossec-list 
>> *Subject:* [EXTERNAL] [ossec-list] Unable to install OSSEC Agent
>>
>>
>>
>> I am unable to install the ossec agent on a centos 7 server.  I get this
>> error:
>>
>> In file included from ./headers/shared.h:215:0,
>>
>>  from client-agent/sendmsg.c:10:
>>
>> ./os_regex/os_regex.h:19:19: fatal error: pcre2.h: No such file or
>> directory
>>
>>  #include 
>>
>>
>> After installing pcre-devel, it still fails with this error.
>>
>> --
>>
>> ---
>> You received this message because you are subscribed to the Google Groups
>> "ossec-list" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to ossec...@googlegroups.com.
>> To view this discussion on the web visit
>> https://groups.google.com/d/msgid/ossec-list/87a1b5ac-5b1d-476c-bda7-1c1dfc8cdae3%40googlegroups.com
>> 
>> .
>>
> --
>
> ---
> You received this message because you are subscribed to the Google Groups
> "ossec-list" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to ossec-list+unsubscr...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/ossec-list/c7fed188-a884-40cb-94be-59d01f2878df%40googlegroups.com
> 
> .
>

-- 

--- 
You received this message because you are subscribed to the Google Groups 
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ossec-list+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ossec-list/CAPR9YNRGvi3fmW%2BTQ2FnUGr1mYMVBmYgw6EYD84mC0kN%2B%2B_xBw%40mail.gmail.com.

[ossec-list] Query on rule for Supported languages

[sumit soni]

Hi ,
I have systems with different languages and wondering if  I create a rule 
to match English logs  can that rule also work for logs from other language 
OS or not .
For .e.g if create a rule whc=ich mach with following string  3 incorrect 
password attempts  and apply this rule on a System With 
Japanese language  would it work  and OSSEC would able to translate match 
string from one language to other ??
Or do i have to create new rule for specific language characters to match

Regards
Sumit

-- 

--- 
You received this message because you are subscribed to the Google Groups 
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ossec-list+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ossec-list/67b4a34a-a1a3-485c-8140-087b9042bab1%40googlegroups.com.

Re: [ossec-list] Unable to install OSSEC Agent

[David Williams]

Andy,
I believe there are seperate pcre2 packages. I have these installed:

pcre-8.32-17.el7.x86_64
pcre2-utf16-10.23-2.el7.x86_64
pcre2-10.23-2.el7.x86_64
pcre2-devel-10.23-2.el7.x86_64
pcre-8.32-17.el7.i686
pcre2-utf32-10.23-2.el7.x86_64


-David

On 4/20/20 2:09 PM, Andy wrote:
> I am unable to install the ossec agent on a centos 7 server.  I get this
> error:
> |
> In file included from ./headers/shared.h:215:0,
>                  from client-agent/sendmsg.c:10:
> ./os_regex/os_regex.h:19:19: fatal error: pcre2.h: No such file or directory
>  #include 
> |
> 
> After installing pcre-devel, it still fails with this error. 
> 
> -- 
> 
> ---
> You received this message because you are subscribed to the Google
> Groups "ossec-list" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to ossec-list+unsubscr...@googlegroups.com
> .
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/ossec-list/87a1b5ac-5b1d-476c-bda7-1c1dfc8cdae3%40googlegroups.com
> .

-- 

GPG (http://www.gnupg.org/) key available from:
http://www.kayakero.net/per/david/

-- 

--- 
You received this message because you are subscribed to the Google Groups 
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ossec-list+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ossec-list/cab8fad4-032e-f5ba-4390-e3285aa8bf9e%40kayakero.net.


signature.asc
Description: OpenPGP digital signature

Re: [ossec-list] Unable to install OSSEC Agent

[Luke Boguslaw]

It is telling me that pcre-utf does not exist, and pcre-devel is already
installed.

On Mon, Apr 20, 2020 at 5:30 PM David Williams 
wrote:

> Andy,
> I believe there are seperate pcre2 packages. I have these
> installed:
>
> pcre-8.32-17.el7.x86_64
> pcre2-utf16-10.23-2.el7.x86_64
> pcre2-10.23-2.el7.x86_64
> pcre2-devel-10.23-2.el7.x86_64
> pcre-8.32-17.el7.i686
> pcre2-utf32-10.23-2.el7.x86_64
>
>
> -David
>
> On 4/20/20 2:09 PM, Andy wrote:
> > I am unable to install the ossec agent on a centos 7 server.  I get this
> > error:
> > |
> > In file included from ./headers/shared.h:215:0,
> >  from client-agent/sendmsg.c:10:
> > ./os_regex/os_regex.h:19:19: fatal error: pcre2.h: No such file or
> directory
> >  #include 
> > |
> >
> > After installing pcre-devel, it still fails with this error.
> >
> > --
> >
> > ---
> > You received this message because you are subscribed to the Google
> > Groups "ossec-list" group.
> > To unsubscribe from this group and stop receiving emails from it, send
> > an email to ossec-list+unsubscr...@googlegroups.com
> > .
> > To view this discussion on the web visit
> >
> https://groups.google.com/d/msgid/ossec-list/87a1b5ac-5b1d-476c-bda7-1c1dfc8cdae3%40googlegroups.com
> > <
> https://groups.google.com/d/msgid/ossec-list/87a1b5ac-5b1d-476c-bda7-1c1dfc8cdae3%40googlegroups.com?utm_medium=email&utm_source=footer
> >.
>
> --
>
> GPG (http://www.gnupg.org/) key available from:
> http://www.kayakero.net/per/david/
>
> --
>
> ---
> You received this message because you are subscribed to the Google Groups
> "ossec-list" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to ossec-list+unsubscr...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/ossec-list/cab8fad4-032e-f5ba-4390-e3285aa8bf9e%40kayakero.net
> .
>

-- 

--- 
You received this message because you are subscribed to the Google Groups 
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ossec-list+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ossec-list/CABX9L-gdpq-JthSt-XW0V1bv49kwAVdXvB43s6rD%3D-WFm2-XRQ%40mail.gmail.com.

Re: [ossec-list] Unable to install OSSEC Agent

[David Williams]

Andy,
How about this:
yum info pcre2-devel
Note the "2:" pcre2-devel
-David


On 4/20/20 7:43 PM, Luke Boguslaw wrote:
> It is telling me that pcre-utf does not exist, and pcre-devel is already
> installed. 
> 
> On Mon, Apr 20, 2020 at 5:30 PM David Williams  > wrote:
> 
> Andy,
>         I believe there are seperate pcre2 packages. I have these
> installed:
> 
> pcre-8.32-17.el7.x86_64
> pcre2-utf16-10.23-2.el7.x86_64
> pcre2-10.23-2.el7.x86_64
> pcre2-devel-10.23-2.el7.x86_64
> pcre-8.32-17.el7.i686
> pcre2-utf32-10.23-2.el7.x86_64
> 
> 
>         -David
> 
> On 4/20/20 2:09 PM, Andy wrote:
> > I am unable to install the ossec agent on a centos 7 server.  I
> get this
> > error:
> > |
> > In file included from ./headers/shared.h:215:0,
> >                  from client-agent/sendmsg.c:10:
> > ./os_regex/os_regex.h:19:19: fatal error: pcre2.h: No such file or
> directory
> >  #include 
> > |
> >
> > After installing pcre-devel, it still fails with this error. 
> >
> > --
> >
> > ---
> > You received this message because you are subscribed to the Google
> > Groups "ossec-list" group.
> > To unsubscribe from this group and stop receiving emails from it, send
> > an email to ossec-list+unsubscr...@googlegroups.com
> 
> >  >.
> > To view this discussion on the web visit
> >
> 
> https://groups.google.com/d/msgid/ossec-list/87a1b5ac-5b1d-476c-bda7-1c1dfc8cdae3%40googlegroups.com
> >
> 
> .
> 
> -- 
> 
> GPG (http://www.gnupg.org/) key available from:
> http://www.kayakero.net/per/david/
> 
> -- 
> 
> ---
> You received this message because you are subscribed to the Google
> Groups "ossec-list" group.
> To unsubscribe from this group and stop receiving emails from it,
> send an email to ossec-list+unsubscr...@googlegroups.com
> .
> To view this discussion on the web visit
> 
> https://groups.google.com/d/msgid/ossec-list/cab8fad4-032e-f5ba-4390-e3285aa8bf9e%40kayakero.net.
> 
> -- 
> 
> ---
> You received this message because you are subscribed to the Google
> Groups "ossec-list" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to ossec-list+unsubscr...@googlegroups.com
> .
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/ossec-list/CABX9L-gdpq-JthSt-XW0V1bv49kwAVdXvB43s6rD%3D-WFm2-XRQ%40mail.gmail.com
> .

-- 

GPG (http://www.gnupg.org/) key available from:
http://www.kayakero.net/per/david/

-- 

--- 
You received this message because you are subscribed to the Google Groups 
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ossec-list+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ossec-list/19948dfd-4a75-ebc9-e7d7-44e5265fb86c%40kayakero.net.


signature.asc
Description: OpenPGP digital signature