Re: Re: [ossec-list] splunk+ossec ossec-agent Disconnected?

2013-01-31 Thread Kat
Upgrade your agents to 2.7 -- problems should be resolved. On Wednesday, January 30, 2013 6:52:49 PM UTC-8, root wrote: hi thank you reply it. yes,my ossec server is ossec 2.7 and my ossec-agent is ossec 2.6,but my other agent also is ossec 2.6 and work normal.i down konw why this.

[ossec-list] Re: Windows Agent not reporting deleted files

2013-01-31 Thread George Ehrhorn
I'm trying to replicate this too. The agent it still monitoring the directory, but the DEBUG logs do not show any record of the file being deleted. The server only reports the file being added to the DB. On Wednesday, January 30, 2013 10:20:28 PM UTC-5, jtu...@rdx.com wrote: ok, I feel dumb.

Re: [ossec-list] Re: AnaLogi - OSSEC WUI v1.3

2013-01-31 Thread Robert Micallef
Hi Andy, It could have been permissions. Actually, it probably was permissions. I think you are right and when I copied from the old server it inherited the same permissions of the server. As I said it is working now, so I can't take a screenshot. I remember messing with permissions on our test

Re: [ossec-list] Trying to install on Solaris 10

2013-01-31 Thread Greg Ramos
I was able to install on a CentOS machine without any problem. Yesterday it was suggested I go and download from the development site, which I did. The 'install.sh' script still did not work, but I was able to go to the src directory and do a 'make all'. On Wed, Jan 30, 2013 at 1:09 PM, Kat

Re: [ossec-list] Re: Trying to install on Solaris 10

2013-01-31 Thread dan (ddp)
On Wed, Jan 30, 2013 at 3:01 PM, brownwrap brownw...@gmail.com wrote: OK, thanks. The install.sh script still had the syntax error, but the make Could you try running the install script like this: /bin/sh -x ./install.sh I'm curious as to where it's failing exactly. I didn't see anything on

Re: [ossec-list] Re: Trying to install on Solaris 10

2013-01-31 Thread Greg Ramos
OK, I did as you requested. There was a lot more output, but here is where it dies: + echo -- Press ENTER to continue or Ctrl-C to abort. -- -- Press ENTER to continue or Ctrl-C to abort. -- + [ X = X ] + read ANY + . ./src/init/update.sh ./install.sh: syntax error at line 142: `$'

Re: [ossec-list] Re: Trying to install on Solaris 10

2013-01-31 Thread Greg Ramos
I did the make all in the src directory without any errors, but the bin directory is pretty empty: ls -larth /var/ossec/bin total 30 -r-xr-x--- 1 root ossec 4.3K Jan 26 01:46 util.sh -r-xr-x--- 1 root ossec 7.4K Jan 26 01:46 ossec-control dr-xr-x--- 14 root ossec

Re: [ossec-list] Re: Trying to install on Solaris 10

2013-01-31 Thread dan (ddp)
On Thu, Jan 31, 2013 at 12:01 PM, Greg Ramos brownw...@gmail.com wrote: I did the make all in the src directory without any errors, but the bin directory is pretty empty: ls -larth /var/ossec/bin total 30 -r-xr-x--- 1 root ossec 4.3K Jan 26 01:46 util.sh -r-xr-x--- 1 root

Re: [ossec-list] Re: Trying to install on Solaris 10

2013-01-31 Thread Greg Ramos
Well, I did not make any directory other than /var/ossec. Make all created all of the sub-directories and what's in them. On Thu, Jan 31, 2013 at 10:17 AM, dan (ddp) ddp...@gmail.com wrote: On Thu, Jan 31, 2013 at 12:01 PM, Greg Ramos brownw...@gmail.com wrote: I did the make all in the src

Re: [ossec-list] Re: Trying to install on Solaris 10

2013-01-31 Thread dan (ddp)
On Thu, Jan 31, 2013 at 1:02 PM, Greg Ramos brownw...@gmail.com wrote: Well, I did not make any directory other than /var/ossec. Make all created all of the sub-directories and what's in them. On Thu, Jan 31, 2013 at 10:17 AM, dan (ddp) ddp...@gmail.com wrote: On Thu, Jan 31, 2013 at 12:01

Re: [ossec-list] Re: Trying to install on Solaris 10

2013-01-31 Thread dan (ddp)
On Thu, Jan 31, 2013 at 1:17 PM, Greg Ramos brownw...@gmail.com wrote: Some of them exist, but they aren't in any bin directory: So No, they don't exist. It really seems like fixing your shell would be the easiest way to solve this. Or even trying to debug the shell script... file

Re: [ossec-list] Re: Trying to install on Solaris 10

2013-01-31 Thread Greg Ramos
I guess what I don't understand you when you say fixing my shell or the shell script. I was able to run the install.sh on CentOS without a hitch. Bottom line is, it doesn't seem to be working on Solaris, though someone said they did install it under Sol 10. I On Thu, Jan 31, 2013 at 11:24 AM, dan

Re: [ossec-list] Re: Trying to install on Solaris 10

2013-01-31 Thread dan (ddp)
On Thu, Jan 31, 2013 at 1:34 PM, Greg Ramos brownw...@gmail.com wrote: I guess what I don't understand you when you say fixing my shell or the shell script. I was able to run the install.sh on CentOS without a hitch. Bottom line is, it doesn't seem to be working on Solaris, though someone said

Re: [ossec-list] Re: Trying to install on Solaris 10

2013-01-31 Thread Greg Ramos
Well, actually it is on a secured net, so I can't give you access. On Thu, Jan 31, 2013 at 11:39 AM, dan (ddp) ddp...@gmail.com wrote: On Thu, Jan 31, 2013 at 1:34 PM, Greg Ramos brownw...@gmail.com wrote: I guess what I don't understand you when you say fixing my shell or the shell script.