Re: Prelude support for Ossec

Sebastian,

Yes this worked and sensor shows up in the prelude,
althought currently i do not see any events, generated by
the ossec sensor, but will dig a little before i ask for
help.

thank you very much.

--Arthur
---- Sebastien Tricaud <sebastien.tricaudgmail.com> wrote: 

=============
Hello Arthur,

On 10/17/07, Arthur Chilipweli <achilipwelicox.net> wrote:
>
> I went ahead and register the ossec as follow
> prelude-adduser register ossec "idmef:w
admin:r" 10.6.1.100 --uid ossec --gid ossec
> started the ossec
> Ossec seems to be running but i expected the sensor to
show up in the prelude
>

There was a known issue actually, where the prelude support
was simply
not compile because the "make setprelude" was
erase latter.

A new release fixed quite a lot of stuff regarding prelude
support
compilation within ossec and is available here :
http://www.ossec.net/files/snapshots/ossec-hids-071
016.tar.gz

Can you tell me if this fix your problem ?

Thanks,
Sebastien.

_______________________________________________
Prelude-user site list
Prelude-userprelude-ids.org
http://www.prelude-ids.org/mailman/listinfo/prelude-user