[prev in list] [next in list] [prev in thread] [next in thread] 

List:       ossec-dev
Subject:    Re: [ossec-dev] Saving Agent Management Information to MySQL
From:       Xuan-Son Vu <sonvx.coltech () gmail ! com>
Date:       2014-10-02 5:14:13
Message-ID: CA+q6GZr2nLzpBeA+L9dTTTj1LpFj0uU6Kfmq2p6u1Yorr=bFsQ () mail ! gmail ! com
[Download RAW message or body]

Obviously it's about complete the designation of OSSEC. Since there is a
table design for storing agent information but it hasn't be used yet.

On 1 October 2014 21:40, dan (ddp) <ddpbsd@gmail.com> wrote:

> On Wed, Oct 1, 2014 at 12:18 AM, Xuan-Son Vu <sonvx.coltech@gmail.com>
> wrote:
> > Hello there,
> > 
> > I am changing OSSEC source code to manage agent information using MySQL
> > whenever an agent is added/removed. Previously OSSEC manages it via file
> > only. However I am facing some issues that wanna ask:
> > 
> > 1. Agent management is done via a different script called manage_agents
> that
> > are apart from OSSEC Server. So there isn't any thing related to database
> > within this part. So is this any problem if I modify and interact with
> DB in
> > here. There must be a reason that OSSEC hasn't do it yet, though.
> > 
> 
> I think if you're going to use a database for agent information you'd
> have to add support to manage_agents.
> 
> > 2. If it is okay to interact with MySQL here, so any idea about changing
> > Makefile in addagent source code folder to allow it re-uses some existing
> > utilities in os_dbd?
> > 
> 
> The Makefiles are currently being heavily modified.
> 
> > Any help? please.
> 
> What would be the benefits of adding mysql support? Does it solve
> actual problems?
> Are you planning on including backwards compatibility for unix users?
> 
> > --
> > 
> > --
> > 
> > ---
> > You received this message because you are subscribed to the Google Groups
> > "ossec-dev" group.
> > To unsubscribe from this group and stop receiving emails from it, send an
> > email to ossec-dev+unsubscribe@googlegroups.com.
> > For more options, visit https://groups.google.com/d/optout.
> 
> --
> 
> ---
> You received this message because you are subscribed to the Google Groups
> "ossec-dev" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to ossec-dev+unsubscribe@googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.
> 



-- 
VU XUAN SON
Master Student of Machine Learning Laboratory
Department of Computer Science
Kyungpook National University, South Korea.
80 Daehakro, Bukgu, Daegu, 702-701, Korea
Yahoo: sonvx_it
Skype: sonvx.coltech

-- 

--- 
You received this message because you are subscribed to the Google Groups "ossec-dev" \
group. To unsubscribe from this group and stop receiving emails from it, send an \
email to ossec-dev+unsubscribe@googlegroups.com. For more options, visit \
https://groups.google.com/d/optout.


[Attachment #3 (text/html)]

<div dir="ltr">Obviously it&#39;s about complete the designation of OSSEC. Since \
there is a table design for storing agent information but it hasn&#39;t be used \
yet.</div><div class="gmail_extra"><br><div class="gmail_quote">On 1 October 2014 \
21:40, dan (ddp) <span dir="ltr">&lt;<a href="mailto:ddpbsd@gmail.com" \
target="_blank">ddpbsd@gmail.com</a>&gt;</span> wrote:<br><blockquote \
class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc \
solid;padding-left:1ex"><span class="">On Wed, Oct 1, 2014 at 12:18 AM, Xuan-Son Vu \
&lt;<a href="mailto:sonvx.coltech@gmail.com">sonvx.coltech@gmail.com</a>&gt; \
wrote:<br> &gt; Hello there,<br>
&gt;<br>
&gt; I am changing OSSEC source code to manage agent information using MySQL<br>
&gt; whenever an agent is added/removed. Previously OSSEC manages it via file<br>
&gt; only. However I am facing some issues that wanna ask:<br>
&gt;<br>
&gt; 1. Agent management is done via a different script called manage_agents that<br>
&gt; are apart from OSSEC Server. So there isn&#39;t any thing related to \
database<br> &gt; within this part. So is this any problem if I modify and interact \
with DB in<br> &gt; here. There must be a reason that OSSEC hasn&#39;t do it yet, \
though.<br> &gt;<br>
<br>
</span>I think if you&#39;re going to use a database for agent information \
you&#39;d<br> have to add support to manage_agents.<br>
<span class=""><br>
&gt; 2. If it is okay to interact with MySQL here, so any idea about changing<br>
&gt; Makefile in addagent source code folder to allow it re-uses some existing<br>
&gt; utilities in os_dbd?<br>
&gt;<br>
<br>
</span>The Makefiles are currently being heavily modified.<br>
<br>
&gt; Any help? please.<br>
<br>
What would be the benefits of adding mysql support? Does it solve<br>
actual problems?<br>
Are you planning on including backwards compatibility for unix users?<br>
<br>
&gt; --<br>
<span class="HOEnZb"><font color="#888888">&gt;<br>
&gt; --<br>
&gt;<br>
&gt; ---<br>
&gt; You received this message because you are subscribed to the Google Groups<br>
&gt; &quot;ossec-dev&quot; group.<br>
&gt; To unsubscribe from this group and stop receiving emails from it, send an<br>
&gt; email to <a href="mailto:ossec-dev%2Bunsubscribe@googlegroups.com">ossec-dev+unsubscribe@googlegroups.com</a>.<br>
 &gt; For more options, visit <a href="https://groups.google.com/d/optout" \
target="_blank">https://groups.google.com/d/optout</a>.<br> <br>
--<br>
<br>
---<br>
You received this message because you are subscribed to the Google Groups \
&quot;ossec-dev&quot; group.<br> To unsubscribe from this group and stop receiving \
emails from it, send an email to <a \
href="mailto:ossec-dev%2Bunsubscribe@googlegroups.com">ossec-dev+unsubscribe@googlegroups.com</a>.<br>
 For more options, visit <a href="https://groups.google.com/d/optout" \
target="_blank">https://groups.google.com/d/optout</a>.<br> \
</font></span></blockquote></div><br><br clear="all"><div><br></div>-- <br><div \
dir="ltr"><div>VU XUAN SON</div><div>Master Student of Machine Learning \
Laboratory</div><div>Department of Computer Science</div><div>Kyungpook National \
University, South Korea.</div><div>80 Daehakro, Bukgu, Daegu, 702-701, \
Korea</div><div>Yahoo: sonvx_it</div><div>Skype: sonvx.coltech</div></div> </div>

<p></p>

-- <br />
<br />
--- <br />
You received this message because you are subscribed to the Google Groups \
&quot;ossec-dev&quot; group.<br /> To unsubscribe from this group and stop receiving \
emails from it, send an email to <a \
href="mailto:ossec-dev+unsubscribe@googlegroups.com">ossec-dev+unsubscribe@googlegroups.com</a>.<br \
/> For more options, visit <a \
href="https://groups.google.com/d/optout">https://groups.google.com/d/optout</a>.<br \
/>



[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic