Re: OSSEC Events not being logged
Yoann Vandoorselaere <[email protected]>
| Newsgroups | gmane.comp.security.ids.prelude.user |
|---|---|
| Message-ID | <1217870482.6225.57.camel@arwen> |
Le lundi 04 août 2008 à 08:19 -0400, Hammond, Stanley a écrit : > I ran 'prelude-manager --debug' and I think I see the problem. OSSEC is sending the alerts to the prelude-manager, but the create_time for the alerts is different than the other sensors. From OSSEC the create time for each event (except the restart of OSSEC) is listed as "create_time: 01/01/1970 00:00:00.0 +00:00" > > A copy of the debugging information with the OSSEC events are listed below: Hi, This is due to a regression in libprelude-0.9.18. A preview release of 0.9.19, that fixes this issue, can be downloaded from: http://awale.prelude-ids.org/~yoann/libprelude-0.9.19.tar.gz Regards, -- Yoann Vandoorselaere | Responsable R&D / CTO | PreludeIDS Technologies Tel: +33 (0)8 70 70 21 58 Fax: +33(0)4 78 42 21 58 http://www.prelude-ids.com _______________________________________________ Prelude-user site list [email protected] http://lists.prelude-ids.org/mailman/listinfo/prelude-user