[ossec-list] Reporting network changes

2014-05-15 Thread Steven Stern
I'm getting network change notifications a couple of times per day on one system. It appears it's comparing the current state to some base state where most of the services weren't started. I can't find anything in the logs to indicate that services are being restarted during the day, so this is a

Re: [ossec-list] Reporting network changes

2014-05-15 Thread dan (ddp)
On Thu, May 15, 2014 at 12:21 PM, Steven Stern subscribed-li...@sterndata.com wrote: I'm getting network change notifications a couple of times per day on one system. It appears it's comparing the current state to some base state where most of the services weren't started. I can't find anything