RE: [ossec-list] install error on HP-UX

2014-10-06 Thread Farnsworth, Robert
Thanks Jeremy for this information. If anyone else needs this for HP-UX OSSEC installs exporting the gcc path works to get OSSEC installed. export CC=/path/to/gcc -Original Message- From: ossec-list@googlegroups.com [mailto:ossec-list@googlegroups.com] On Behalf Of Jeremy Rossi Sent: F

Re: [ossec-list] OSSEC rule for Shellshock CGI attacks?

2014-10-06 Thread Michael Starks
On 2014-10-04 5:30, Jan Andrasko wrote: Hello Michael, Thanks for sharing this. Any specific reason for the '.+' after the '()'? You are right, '.*' is better. Thanks for pointing this out. Also, the ':' before ';' is not part of the exploit, so you may want to remove that. You are right

Re: [ossec-list] OSSEC rule for Shellshock CGI attacks?

2014-10-06 Thread grant
You are relying on this 31100 however that doesn't exist in 2.7.1 Where would I find the Apache rules for 2.8 so I can copy that rule in? On Saturday, October 4, 2014 9:30:57 AM UTC-4, Michael Starks wrote: > > On 10/04/2014 05:30 AM, Jan Andrasko wrote: > > Rob, > > > > issue with your rul

Re: [ossec-list] Which Download?

2014-10-06 Thread dan (ddp)
On Mon, Oct 6, 2014 at 6:15 AM, Maureen McAlindon wrote: > Apologies as this is a very un-technical question. > > I am a Finance Manager in a small retail business and I have been advised to > install OSSEC on my laptop as part of my PCI Compliance Programme. I want > to check which version I sho

[ossec-list] Which Download?

2014-10-06 Thread Maureen McAlindon
Apologies as this is a very un-technical question. I am a Finance Manager in a small retail business and I have been advised to install OSSEC on my laptop as part of my PCI Compliance Programme. I want to check which version I should download - I’m guessing it’s Agent 2.8 – Windows? I’m cur

Re: [ossec-list] Authentication key file '/etc/client.keys' not found.

2014-10-06 Thread dan (ddp)
On Oct 6, 2014 5:11 AM, "Bryan Pearson" wrote: > > I did a compile from source using srpm. I have now moved into install the agent on a box, and I am now getting the following message. I am a bit confused becuase ossec is lookig in the wrong place for the key file. > > I have already used the aut

[ossec-list] Authentication key file '/etc/client.keys' not found.

2014-10-06 Thread Bryan Pearson
I did a compile from source using srpm. I have now moved into install the agent on a box, and I am now getting the following message. I am a bit confused becuase ossec is lookig in the wrong place for the key file. I have already used the auto auth to connect the machines, but because the daem