[prev in list] [next in list] [prev in thread] [next in thread] 

List:       ossec-list
Subject:    Re: [ossec-list] OpenBSD 6 - Real Monitoring
From:       "R0me0 ***" <knight.neo () gmail ! com>
Date:       2016-09-30 22:19:04
Message-ID: CAN1fqMqi9qmSo1x6JXKC7DK1azsfzj5sSMYg9bOMfXrMjZwmSw () mail ! gmail ! com
[Download RAW message or body]

latest stable 2.8.3 neither openbsd_initify from your repository compiles.

ldconfig -r | fgrep inotify

linotify.2.0 => /usr/local/lib/inotify/libinotify.so.2.0


Thank you

If you need anything else let me know





2016-09-30 17:25 GMT-03:00 dan (ddp) <ddpbsd@gmail.com>:

> On Sep 30, 2016 3:44 PM, "R0me0 ***" <knight.neo@gmail.com> wrote:
> > 
> > Dan I haved cloned openbsd_inotify
> > 
> > and isnt compile
> > 
> > + -I/usr/local/include/inotify
> > 
> > 
> > 
> > 
> > ifeq (${uname_S},OpenBSD)
> > #               DEFINES+=-DOpenBSD
> > DEFINES+=-pthread
> > LUA_PLAT=posix
> > CFLAGS+=-I/usr/local/include
> -I/usr/local/include/inotify
> > OSSEC_LDFLAGS+=-L/usr/local/lib
> > 
> > 
> > 
> > 
> > 
> > shared.a(validate_op.o): In function `OS_IsValidIP':
> > validate_op.c:(.text+0xa9b): warning: warning: strcpy() is almost always
> misused, please use strlcpy()
> > shared.a(hash_op.o): In function `OSHash_setSize':
> > hash_op.c:(.text+0x366): warning: warning: random() may return
> deterministic values, is that what you want?
> > syscheckd/run_realtime.o: In function `realtime_start':
> > run_realtime.c:(.text+0x5e): undefined reference to `inotify_init'
> > syscheckd/run_realtime.o: In function `realtime_adddir':
> > run_realtime.c:(.text+0x131): undefined reference to `inotify_add_watch'
> > collect2: ld returned 1 exit status
> > gmake: *** [Makefile:975: ossec-syscheckd] Error 1
> > 
> > Error 0x5.
> > Building error. Unable to finish the installation.
> > 
> > 
> > 
> > same error from OSSEC 2.9 RC3
> > 
> > 
> > From OpenBSD 6.0 AMD64 Pkg's ->   /var/db/pkg/libinotify-20160503
> > 
> > 
> 
> Make aure libinotify ahows up when you `ldconfig -r`
> 
> Other than that, I'll have to take a closer look later
> 
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > 2016-09-30 15:52 GMT-03:00 R0me0 *** <knight.neo@gmail.com>:
> > > 
> > > I am using 2.8.3 version and is a little bit different. Anyway I have
> made all changes in sources files without success.
> > > 
> > > Another very interesting point is:
> > > 
> > > report_changes=yes
> > > 
> > > isnt reporting the diff's just sum changes.
> > > 
> > > Thank you guys ! really really appreciated your help !
> > > 
> > > > )
> > > 
> > > 
> > > 
> > > 
> > > 
> > > 
> > > 
> > > 
> > > 
> > > 2016-09-30 13:13 GMT-03:00 dan (ddp) <ddpbsd@gmail.com>:
> > > > 
> > > > On Fri, Sep 30, 2016 at 11:07 AM, R0me0 *** <knight.neo@gmail.com>
> wrote:
> > > > > Taking a better look within Makeall file the flag to compile is: cho
> > > > > "EEXTRA=-DUSEINOTIFY" >> Config.OS
> > > > > 
> > > > > tmp/ossec-hids-2.8.3/src/syscheckd/run_realtime.c:172: undefined
> reference
> > > > > to `inotify_add_watch'
> > > > > collect2: ld returned 1 exit status
> > > > > *** Error 1 in syscheckd (Makefile:15 'syscheck')
> > > > > 
> > > > 
> > > > I'm using MASTER from github, but here are the changes I made to get
> > > > it to compile:
> > > > https://github.com/ddpbsd/ossec-hids/commits/openbsd_inotify
> > > > 
> > > > 
> > > > > 
> > > > > 
> > > > > 2016-09-30 11:46 GMT-03:00 dan (ddp) <ddpbsd@gmail.com>:
> > > > > > 
> > > > > > On Fri, Sep 30, 2016 at 9:49 AM, R0me0 *** <knight.neo@gmail.com>
> wrote:
> > > > > > > @dann I already set CFLAGS including include directory of
> inotify.h
> > > > > > > without
> > > > > > > success
> > > > > > > 
> > > > > > 
> > > > > > I've gotten it to compile and not give me errors, but I also don't
> see
> > > > > > any realtime alerts.
> > > > > > I'll have to find a simple inotify testing program or something to
> see
> > > > > > if it even works.
> > > > > > 
> > > > > > > @Victor without success
> > > > > > > 
> > > > > > > > (
> > > > > > > 
> > > > > > > I'll keep researching
> > > > > > > 
> > > > > > > Thank you guys
> > > > > > > 
> > > > > > > 
> > > > > > > 2016-09-30 8:12 GMT-03:00 Victor Fernandez <victor@wazuh.com>:
> > > > > > > > 
> > > > > > > > Hello,
> > > > > > > > 
> > > > > > > > I've never done this on OpenBSD, but try to force the inotify
> support
> > > > > > > > with
> > > > > > > > Make:
> > > > > > > > 
> > > > > > > > cd src
> > > > > > > > make TARGET=agent USE_INOTIFY=yes
> > > > > > > > 
> > > > > > > > Hope it helps.
> > > > > > > > Regards.
> > > > > > > > 
> > > > > > > > 
> > > > > > > > On Friday, September 30, 2016 at 12:38:30 AM UTC+2, dan (ddpbsd)
> wrote:
> > > > > > > > > 
> > > > > > > > > On Sep 29, 2016 4:10 PM, "R0me0 ***" <knigh...@gmail.com>
> wrote:
> > > > > > > > > > 
> > > > > > > > > > Hello guys.
> > > > > > > > > > 
> > > > > > > > > > I'm trying to use real monitoring.
> > > > > > > > > > 
> > > > > > > > > > I have installed inotify-tools from OpenBSD packages
> > > > > > > > > > 
> > > > > > > > > > Initially I guess something related with run_realtime.c and I
> point
> > > > > > > > > > inotify.h path.
> > > > > > > > > > 
> > > > > > > > > > But I still without be able to use Real monitoring with the
> follow
> > > > > > > > > > error in ossec.conf
> > > > > > > > > > 
> > > > > > > > > > ( OpenBSD - OSSEC AGENT )
> > > > > > > > > > 
> > > > > > > > > > ossec-syscheckd: WARN: Ignoring flag for real time monitoring
> on
> > > > > > > > > > directory: '/etc/pf'.
> > > > > > > > > > 
> > > > > > > > > > Anyone has this setup working ? Any directions will be really
> > > > > > > > > > appreciated
> > > > > > > > > > 
> > > > > > > > > > Thanks in advance,
> > > > > > > > > > 
> > > > > > > > > 
> > > > > > > > > I spent some time messing with it awhile back, but never got it
> > > > > > > > > working.
> > > > > > > > > There are some Makefile changes you have to make, as well as
> possible
> > > > > > > > > src
> > > > > > > > > changes.
> > > > > > > > > 
> > > > > > > > > > 
> > > > > > > > > > 
> > > > > > > > > > 
> > > > > > > > > > --
> > > > > > > > > > 
> > > > > > > > > > ---
> > > > > > > > > > You received this message because you are subscribed to the
> Google
> > > > > > > > > > Groups "ossec-list" group.
> > > > > > > > > > To unsubscribe from this group and stop receiving emails from
> it,
> > > > > > > > > > send
> > > > > > > > > > an email to ossec-list+...@googlegroups.com.
> > > > > > > > > > For more options, visit https://groups.google.com/d/optout.
> > > > > > > > 
> > > > > > > > --
> > > > > > > > 
> > > > > > > > ---
> > > > > > > > You received this message because you are subscribed to the
> Google
> > > > > > > > Groups
> > > > > > > > "ossec-list" group.
> > > > > > > > To unsubscribe from this group and stop receiving emails from
> it, send
> > > > > > > > an
> > > > > > > > email to ossec-list+unsubscribe@googlegroups.com.
> > > > > > > > For more options, visit https://groups.google.com/d/optout.
> > > > > > > 
> > > > > > > 
> > > > > > > --
> > > > > > > 
> > > > > > > ---
> > > > > > > You received this message because you are subscribed to the Google
> > > > > > > Groups
> > > > > > > "ossec-list" group.
> > > > > > > To unsubscribe from this group and stop receiving emails from it,
> send
> > > > > > > an
> > > > > > > email to ossec-list+unsubscribe@googlegroups.com.
> > > > > > > For more options, visit https://groups.google.com/d/optout.
> > > > > > 
> > > > > > --
> > > > > > 
> > > > > > ---
> > > > > > You received this message because you are subscribed to the Google
> Groups
> > > > > > "ossec-list" group.
> > > > > > To unsubscribe from this group and stop receiving emails from it,
> send an
> > > > > > email to ossec-list+unsubscribe@googlegroups.com.
> > > > > > For more options, visit https://groups.google.com/d/optout.
> > > > > 
> > > > > 
> > > > > --
> > > > > 
> > > > > ---
> > > > > You received this message because you are subscribed to the Google
> Groups
> > > > > "ossec-list" group.
> > > > > To unsubscribe from this group and stop receiving emails from it,
> send an
> > > > > email to ossec-list+unsubscribe@googlegroups.com.
> > > > > For more options, visit https://groups.google.com/d/optout.
> > > > 
> > > > --
> > > > 
> > > > ---
> > > > You received this message because you are subscribed to the Google
> Groups "ossec-list" group.
> > > > To unsubscribe from this group and stop receiving emails from it, send
> an email to ossec-list+unsubscribe@googlegroups.com.
> > > > For more options, visit https://groups.google.com/d/optout.
> > > 
> > > 
> > 
> > --
> > 
> > ---
> > You received this message because you are subscribed to the Google
> Groups "ossec-list" group.
> > To unsubscribe from this group and stop receiving emails from it, send
> an email to ossec-list+unsubscribe@googlegroups.com.
> > For more options, visit https://groups.google.com/d/optout.
> 
> --
> 
> ---
> You received this message because you are subscribed to the Google Groups
> "ossec-list" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to ossec-list+unsubscribe@googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.
> 

-- 

--- 
You received this message because you are subscribed to the Google Groups \
"ossec-list" group. To unsubscribe from this group and stop receiving emails from it, \
send an email to ossec-list+unsubscribe@googlegroups.com. For more options, visit \
https://groups.google.com/d/optout.


[Attachment #3 (text/html)]

<div dir="ltr">  latest stable 2.8.3 neither openbsd_initify from your repository \
compiles.<div><br></div><div>ldconfig -r | fgrep inotify  \
<br><div><br></div><div><span style="font-family:monospace"><span \
style="color:rgb(0,0,0)">linotify.2.0 =&gt; \
/usr/local/lib/inotify/libinotify.so.2.0</span><br></span></div><div><span \
style="font-family:monospace"><span \
style="color:rgb(0,0,0)"><br></span></span></div><div><span \
style="font-family:monospace"><span \
style="color:rgb(0,0,0)"><br></span></span></div><div><span \
style="font-family:monospace"><span style="color:rgb(0,0,0)">Thank \
you</span></span></div><div><span style="font-family:monospace"><span \
style="color:rgb(0,0,0)"><br></span></span></div><div><span \
style="font-family:monospace"><span style="color:rgb(0,0,0)">If you need anything \
else let me know</span></span></div><div><span style="font-family:monospace"><span \
style="color:rgb(0,0,0)"><br></span></span></div><div><span \
style="font-family:monospace"><span \
style="color:rgb(0,0,0)"><br></span></span></div><div><span \
style="font-family:monospace"><span \
style="color:rgb(0,0,0)"><br></span></span></div><div><span \
style="font-family:monospace"><span \
style="color:rgb(0,0,0)"><br></span></span></div></div></div><div \
class="gmail_extra"><br><div class="gmail_quote">2016-09-30 17:25 GMT-03:00 dan (ddp) \
<span dir="ltr">&lt;<a href="mailto:ddpbsd@gmail.com" \
target="_blank">ddpbsd@gmail.com</a>&gt;</span>:<br><blockquote class="gmail_quote" \
style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span \
class=""><p dir="ltr"></p> <p dir="ltr">On Sep 30, 2016 3:44 PM, &quot;R0me0 \
***&quot; &lt;<a href="mailto:knight.neo@gmail.com" \
target="_blank">knight.neo@gmail.com</a>&gt; wrote:<br> &gt;<br>
&gt; Dan I haved cloned openbsd_inotify<br>
&gt;<br>
&gt; and isnt compile<br>
&gt;<br>
&gt; + -I/usr/local/include/inotify  <br>
&gt;<br>
&gt;<br>
&gt;<br>
&gt;<br>
&gt; ifeq (${uname_S},OpenBSD) <br>
&gt; #                             DEFINES+=-<wbr>DOpenBSD <br>
&gt;                               DEFINES+=-<wbr>pthread <br>
&gt;                               LUA_PLAT=posix <br>
&gt;                               CFLAGS+=-I/usr/<wbr>local/include \
-I/usr/local/include/inotify <br> &gt;                               \
OSSEC_LDFLAGS+=<wbr>-L/usr/local/lib<br> &gt;<br>
&gt;<br>
&gt;<br>
&gt;<br>
&gt;<br>
&gt; shared.a(validate_op.o): In function `OS_IsValidIP&#39;: <br>
&gt; validate_op.c:(.text+0xa9b): warning: warning: strcpy() is almost always \
misused, please use strlcpy() <br> &gt; shared.a(hash_op.o): In function \
`OSHash_setSize&#39;: <br> &gt; hash_op.c:(.text+0x366): warning: warning: random() \
may return deterministic values, is that what you want? <br> &gt; \
syscheckd/run_realtime.o: In function `realtime_start&#39;: <br> &gt; \
run_realtime.c:(.text+0x5e): undefined reference to `inotify_init&#39; <br> &gt; \
syscheckd/run_realtime.o: In function `realtime_adddir&#39;: <br> &gt; \
run_realtime.c:(.text+0x131): undefined reference to `inotify_add_watch&#39; <br> \
&gt; collect2: ld returned 1 exit status <br> &gt; gmake: *** [Makefile:975: \
ossec-syscheckd] Error 1 <br> &gt;<br>
&gt; Error 0x5. <br>
&gt; Building error. Unable to finish the installation.<br>
&gt;<br>
&gt;<br>
&gt;<br>
&gt; same error from OSSEC 2.9 RC3<br>
&gt;<br>
&gt;<br>
&gt; From OpenBSD 6.0 AMD64 Pkg&#39;s -&gt;    \
/var/db/pkg/libinotify-<wbr>20160503<br> &gt;<br>
&gt;</p>
</span><p dir="ltr">Make aure libinotify ahows up when you `ldconfig -r`</p>
<p dir="ltr">Other than that, I&#39;ll have to take a closer look later</p><div \
class="HOEnZb"><div class="h5"> <p dir="ltr">&gt;<br>
&gt;<br>
&gt;<br>
&gt;<br>
&gt;<br>
&gt;<br>
&gt;<br>
&gt; 2016-09-30 15:52 GMT-03:00 R0me0 *** &lt;<a href="mailto:knight.neo@gmail.com" \
target="_blank">knight.neo@gmail.com</a>&gt;:<br> &gt;&gt;<br>
&gt;&gt; I am using 2.8.3 version and is a little bit different. Anyway I have made \
all changes in sources files without success.<br> &gt;&gt;<br>
&gt;&gt; Another very interesting point is:  <br>
&gt;&gt;<br>
&gt;&gt; report_changes=yes<br>
&gt;&gt;<br>
&gt;&gt; isnt reporting the diff&#39;s just sum changes.<br>
&gt;&gt;<br>
&gt;&gt; Thank you guys ! really really appreciated your help !  <br>
&gt;&gt;<br>
&gt;&gt; :)<br>
&gt;&gt;<br>
&gt;&gt;<br>
&gt;&gt;<br>
&gt;&gt;<br>
&gt;&gt;<br>
&gt;&gt;   <br>
&gt;&gt;<br>
&gt;&gt;<br>
&gt;&gt;<br>
&gt;&gt; 2016-09-30 13:13 GMT-03:00 dan (ddp) &lt;<a href="mailto:ddpbsd@gmail.com" \
target="_blank">ddpbsd@gmail.com</a>&gt;:<br> &gt;&gt;&gt;<br>
&gt;&gt;&gt; On Fri, Sep 30, 2016 at 11:07 AM, R0me0 *** &lt;<a \
href="mailto:knight.neo@gmail.com" target="_blank">knight.neo@gmail.com</a>&gt; \
wrote:<br> &gt;&gt;&gt; &gt; Taking a better look within Makeall file the flag to \
compile is: cho<br> &gt;&gt;&gt; &gt; &quot;EEXTRA=-DUSEINOTIFY&quot; &gt;&gt; \
Config.OS<br> &gt;&gt;&gt; &gt;<br>
&gt;&gt;&gt; &gt; tmp/ossec-hids-2.8.3/src/<wbr>syscheckd/run_realtime.c:172: \
undefined reference<br> &gt;&gt;&gt; &gt; to `inotify_add_watch&#39;<br>
&gt;&gt;&gt; &gt; collect2: ld returned 1 exit status<br>
&gt;&gt;&gt; &gt; *** Error 1 in syscheckd (Makefile:15 &#39;syscheck&#39;)<br>
&gt;&gt;&gt; &gt;<br>
&gt;&gt;&gt;<br>
&gt;&gt;&gt; I&#39;m using MASTER from github, but here are the changes I made to \
get<br> &gt;&gt;&gt; it to compile:<br>
&gt;&gt;&gt; <a href="https://github.com/ddpbsd/ossec-hids/commits/openbsd_inotify" \
target="_blank">https://github.com/ddpbsd/<wbr>ossec-hids/commits/openbsd_<wbr>inotify</a><br>
 &gt;&gt;&gt;<br>
&gt;&gt;&gt;<br>
&gt;&gt;&gt; &gt;<br>
&gt;&gt;&gt; &gt;<br>
&gt;&gt;&gt; &gt; 2016-09-30 11:46 GMT-03:00 dan (ddp) &lt;<a \
href="mailto:ddpbsd@gmail.com" target="_blank">ddpbsd@gmail.com</a>&gt;:<br> \
&gt;&gt;&gt; &gt;&gt;<br> &gt;&gt;&gt; &gt;&gt; On Fri, Sep 30, 2016 at 9:49 AM, \
R0me0 *** &lt;<a href="mailto:knight.neo@gmail.com" \
target="_blank">knight.neo@gmail.com</a>&gt; wrote:<br> &gt;&gt;&gt; &gt;&gt; &gt; \
@dann I already set CFLAGS including include directory of inotify.h<br> &gt;&gt;&gt; \
&gt;&gt; &gt; without<br> &gt;&gt;&gt; &gt;&gt; &gt; success<br>
&gt;&gt;&gt; &gt;&gt; &gt;<br>
&gt;&gt;&gt; &gt;&gt;<br>
&gt;&gt;&gt; &gt;&gt; I&#39;ve gotten it to compile and not give me errors, but I \
also don&#39;t see<br> &gt;&gt;&gt; &gt;&gt; any realtime alerts.<br>
&gt;&gt;&gt; &gt;&gt; I&#39;ll have to find a simple inotify testing program or \
something to see<br> &gt;&gt;&gt; &gt;&gt; if it even works.<br>
&gt;&gt;&gt; &gt;&gt;<br>
&gt;&gt;&gt; &gt;&gt; &gt; @Victor without success<br>
&gt;&gt;&gt; &gt;&gt; &gt;<br>
&gt;&gt;&gt; &gt;&gt; &gt; :(<br>
&gt;&gt;&gt; &gt;&gt; &gt;<br>
&gt;&gt;&gt; &gt;&gt; &gt; I&#39;ll keep researching<br>
&gt;&gt;&gt; &gt;&gt; &gt;<br>
&gt;&gt;&gt; &gt;&gt; &gt; Thank you guys<br>
&gt;&gt;&gt; &gt;&gt; &gt;<br>
&gt;&gt;&gt; &gt;&gt; &gt;<br>
&gt;&gt;&gt; &gt;&gt; &gt; 2016-09-30 8:12 GMT-03:00 Victor Fernandez &lt;<a \
href="mailto:victor@wazuh.com" target="_blank">victor@wazuh.com</a>&gt;:<br> \
&gt;&gt;&gt; &gt;&gt; &gt;&gt;<br> &gt;&gt;&gt; &gt;&gt; &gt;&gt; Hello,<br>
&gt;&gt;&gt; &gt;&gt; &gt;&gt;<br>
&gt;&gt;&gt; &gt;&gt; &gt;&gt; I&#39;ve never done this on OpenBSD, but try to force \
the inotify support<br> &gt;&gt;&gt; &gt;&gt; &gt;&gt; with<br>
&gt;&gt;&gt; &gt;&gt; &gt;&gt; Make:<br>
&gt;&gt;&gt; &gt;&gt; &gt;&gt;<br>
&gt;&gt;&gt; &gt;&gt; &gt;&gt; cd src<br>
&gt;&gt;&gt; &gt;&gt; &gt;&gt; make TARGET=agent USE_INOTIFY=yes<br>
&gt;&gt;&gt; &gt;&gt; &gt;&gt;<br>
&gt;&gt;&gt; &gt;&gt; &gt;&gt; Hope it helps.<br>
&gt;&gt;&gt; &gt;&gt; &gt;&gt; Regards.<br>
&gt;&gt;&gt; &gt;&gt; &gt;&gt;<br>
&gt;&gt;&gt; &gt;&gt; &gt;&gt;<br>
&gt;&gt;&gt; &gt;&gt; &gt;&gt; On Friday, September 30, 2016 at 12:38:30 AM UTC+2, \
dan (ddpbsd) wrote:<br> &gt;&gt;&gt; &gt;&gt; &gt;&gt;&gt;<br>
&gt;&gt;&gt; &gt;&gt; &gt;&gt;&gt; On Sep 29, 2016 4:10 PM, &quot;R0me0 ***&quot; \
&lt;<a href="mailto:knigh...@gmail.com" target="_blank">knigh...@gmail.com</a>&gt; \
wrote:<br> &gt;&gt;&gt; &gt;&gt; &gt;&gt;&gt; &gt;<br>
&gt;&gt;&gt; &gt;&gt; &gt;&gt;&gt; &gt; Hello guys.<br>
&gt;&gt;&gt; &gt;&gt; &gt;&gt;&gt; &gt;<br>
&gt;&gt;&gt; &gt;&gt; &gt;&gt;&gt; &gt; I&#39;m trying to use real monitoring.<br>
&gt;&gt;&gt; &gt;&gt; &gt;&gt;&gt; &gt;<br>
&gt;&gt;&gt; &gt;&gt; &gt;&gt;&gt; &gt; I have installed inotify-tools from OpenBSD \
packages<br> &gt;&gt;&gt; &gt;&gt; &gt;&gt;&gt; &gt;<br>
&gt;&gt;&gt; &gt;&gt; &gt;&gt;&gt; &gt; Initially I guess something related with \
run_realtime.c and I point<br> &gt;&gt;&gt; &gt;&gt; &gt;&gt;&gt; &gt; inotify.h \
path.<br> &gt;&gt;&gt; &gt;&gt; &gt;&gt;&gt; &gt;<br>
&gt;&gt;&gt; &gt;&gt; &gt;&gt;&gt; &gt; But I still without be able to use Real \
monitoring with the follow<br> &gt;&gt;&gt; &gt;&gt; &gt;&gt;&gt; &gt; error in \
ossec.conf<br> &gt;&gt;&gt; &gt;&gt; &gt;&gt;&gt; &gt;<br>
&gt;&gt;&gt; &gt;&gt; &gt;&gt;&gt; &gt; ( OpenBSD - OSSEC AGENT )<br>
&gt;&gt;&gt; &gt;&gt; &gt;&gt;&gt; &gt;<br>
&gt;&gt;&gt; &gt;&gt; &gt;&gt;&gt; &gt; ossec-syscheckd: WARN: Ignoring flag for real \
time monitoring on<br> &gt;&gt;&gt; &gt;&gt; &gt;&gt;&gt; &gt; directory: \
&#39;/etc/pf&#39;.<br> &gt;&gt;&gt; &gt;&gt; &gt;&gt;&gt; &gt;<br>
&gt;&gt;&gt; &gt;&gt; &gt;&gt;&gt; &gt; Anyone has this setup working ? Any \
directions will be really<br> &gt;&gt;&gt; &gt;&gt; &gt;&gt;&gt; &gt; appreciated<br>
&gt;&gt;&gt; &gt;&gt; &gt;&gt;&gt; &gt;<br>
&gt;&gt;&gt; &gt;&gt; &gt;&gt;&gt; &gt; Thanks in advance,<br>
&gt;&gt;&gt; &gt;&gt; &gt;&gt;&gt; &gt;<br>
&gt;&gt;&gt; &gt;&gt; &gt;&gt;&gt;<br>
&gt;&gt;&gt; &gt;&gt; &gt;&gt;&gt; I spent some time messing with it awhile back, but \
never got it<br> &gt;&gt;&gt; &gt;&gt; &gt;&gt;&gt; working.<br>
&gt;&gt;&gt; &gt;&gt; &gt;&gt;&gt; There are some Makefile changes you have to make, \
as well as possible<br> &gt;&gt;&gt; &gt;&gt; &gt;&gt;&gt; src<br>
&gt;&gt;&gt; &gt;&gt; &gt;&gt;&gt; changes.<br>
&gt;&gt;&gt; &gt;&gt; &gt;&gt;&gt;<br>
&gt;&gt;&gt; &gt;&gt; &gt;&gt;&gt; &gt;<br>
&gt;&gt;&gt; &gt;&gt; &gt;&gt;&gt; &gt;<br>
&gt;&gt;&gt; &gt;&gt; &gt;&gt;&gt; &gt;<br>
&gt;&gt;&gt; &gt;&gt; &gt;&gt;&gt; &gt; --<br>
&gt;&gt;&gt; &gt;&gt; &gt;&gt;&gt; &gt;<br>
&gt;&gt;&gt; &gt;&gt; &gt;&gt;&gt; &gt; ---<br>
&gt;&gt;&gt; &gt;&gt; &gt;&gt;&gt; &gt; You received this message because you are \
subscribed to the Google<br> &gt;&gt;&gt; &gt;&gt; &gt;&gt;&gt; &gt; Groups \
&quot;ossec-list&quot; group.<br> &gt;&gt;&gt; &gt;&gt; &gt;&gt;&gt; &gt; To \
unsubscribe from this group and stop receiving emails from it,<br> &gt;&gt;&gt; \
&gt;&gt; &gt;&gt;&gt; &gt; send<br> &gt;&gt;&gt; &gt;&gt; &gt;&gt;&gt; &gt; an email \
to <a href="mailto:ossec-list%2B...@googlegroups.com" \
target="_blank">ossec-list+...@googlegroups.<wbr>com</a>.<br> &gt;&gt;&gt; &gt;&gt; \
&gt;&gt;&gt; &gt; For more options, visit <a \
href="https://groups.google.com/d/optout" \
target="_blank">https://groups.google.com/d/<wbr>optout</a>.<br> &gt;&gt;&gt; \
&gt;&gt; &gt;&gt;<br> &gt;&gt;&gt; &gt;&gt; &gt;&gt; --<br>
&gt;&gt;&gt; &gt;&gt; &gt;&gt;<br>
&gt;&gt;&gt; &gt;&gt; &gt;&gt; ---<br>
&gt;&gt;&gt; &gt;&gt; &gt;&gt; You received this message because you are subscribed \
to the Google<br> &gt;&gt;&gt; &gt;&gt; &gt;&gt; Groups<br>
&gt;&gt;&gt; &gt;&gt; &gt;&gt; &quot;ossec-list&quot; group.<br>
&gt;&gt;&gt; &gt;&gt; &gt;&gt; To unsubscribe from this group and stop receiving \
emails from it, send<br> &gt;&gt;&gt; &gt;&gt; &gt;&gt; an<br>
&gt;&gt;&gt; &gt;&gt; &gt;&gt; email to <a \
href="mailto:ossec-list%2Bunsubscribe@googlegroups.com" \
target="_blank">ossec-list+unsubscribe@<wbr>googlegroups.com</a>.<br> &gt;&gt;&gt; \
&gt;&gt; &gt;&gt; For more options, visit <a \
href="https://groups.google.com/d/optout" \
target="_blank">https://groups.google.com/d/<wbr>optout</a>.<br> &gt;&gt;&gt; \
&gt;&gt; &gt;<br> &gt;&gt;&gt; &gt;&gt; &gt;<br>
&gt;&gt;&gt; &gt;&gt; &gt; --<br>
&gt;&gt;&gt; &gt;&gt; &gt;<br>
&gt;&gt;&gt; &gt;&gt; &gt; ---<br>
&gt;&gt;&gt; &gt;&gt; &gt; You received this message because you are subscribed to \
the Google<br> &gt;&gt;&gt; &gt;&gt; &gt; Groups<br>
&gt;&gt;&gt; &gt;&gt; &gt; &quot;ossec-list&quot; group.<br>
&gt;&gt;&gt; &gt;&gt; &gt; To unsubscribe from this group and stop receiving emails \
from it, send<br> &gt;&gt;&gt; &gt;&gt; &gt; an<br>
&gt;&gt;&gt; &gt;&gt; &gt; email to <a \
href="mailto:ossec-list%2Bunsubscribe@googlegroups.com" \
target="_blank">ossec-list+unsubscribe@<wbr>googlegroups.com</a>.<br> &gt;&gt;&gt; \
&gt;&gt; &gt; For more options, visit <a href="https://groups.google.com/d/optout" \
target="_blank">https://groups.google.com/d/<wbr>optout</a>.<br> &gt;&gt;&gt; \
&gt;&gt;<br> &gt;&gt;&gt; &gt;&gt; --<br>
&gt;&gt;&gt; &gt;&gt;<br>
&gt;&gt;&gt; &gt;&gt; ---<br>
&gt;&gt;&gt; &gt;&gt; You received this message because you are subscribed to the \
Google Groups<br> &gt;&gt;&gt; &gt;&gt; &quot;ossec-list&quot; group.<br>
&gt;&gt;&gt; &gt;&gt; To unsubscribe from this group and stop receiving emails from \
it, send an<br> &gt;&gt;&gt; &gt;&gt; email to <a \
href="mailto:ossec-list%2Bunsubscribe@googlegroups.com" \
target="_blank">ossec-list+unsubscribe@<wbr>googlegroups.com</a>.<br> &gt;&gt;&gt; \
&gt;&gt; For more options, visit <a href="https://groups.google.com/d/optout" \
target="_blank">https://groups.google.com/d/<wbr>optout</a>.<br> &gt;&gt;&gt; \
&gt;<br> &gt;&gt;&gt; &gt;<br>
&gt;&gt;&gt; &gt; --<br>
&gt;&gt;&gt; &gt;<br>
&gt;&gt;&gt; &gt; ---<br>
&gt;&gt;&gt; &gt; You received this message because you are subscribed to the Google \
Groups<br> &gt;&gt;&gt; &gt; &quot;ossec-list&quot; group.<br>
&gt;&gt;&gt; &gt; To unsubscribe from this group and stop receiving emails from it, \
send an<br> &gt;&gt;&gt; &gt; email to <a \
href="mailto:ossec-list%2Bunsubscribe@googlegroups.com" \
target="_blank">ossec-list+unsubscribe@<wbr>googlegroups.com</a>.<br> &gt;&gt;&gt; \
&gt; For more options, visit <a href="https://groups.google.com/d/optout" \
target="_blank">https://groups.google.com/d/<wbr>optout</a>.<br> &gt;&gt;&gt;<br>
&gt;&gt;&gt; --<br>
&gt;&gt;&gt;<br>
&gt;&gt;&gt; ---<br>
&gt;&gt;&gt; You received this message because you are subscribed to the Google \
Groups &quot;ossec-list&quot; group.<br> &gt;&gt;&gt; To unsubscribe from this group \
and stop receiving emails from it, send an email to <a \
href="mailto:ossec-list%2Bunsubscribe@googlegroups.com" \
target="_blank">ossec-list+unsubscribe@<wbr>googlegroups.com</a>.<br> &gt;&gt;&gt; \
For more options, visit <a href="https://groups.google.com/d/optout" \
target="_blank">https://groups.google.com/d/<wbr>optout</a>.<br> &gt;&gt;<br>
&gt;&gt;<br>
&gt;<br>
&gt; -- <br>
&gt;<br>
&gt; --- <br>
&gt; You received this message because you are subscribed to the Google Groups \
&quot;ossec-list&quot; group.<br> &gt; To unsubscribe from this group and stop \
receiving emails from it, send an email to <a \
href="mailto:ossec-list%2Bunsubscribe@googlegroups.com" \
target="_blank">ossec-list+unsubscribe@<wbr>googlegroups.com</a>.<br> &gt; For more \
options, visit <a href="https://groups.google.com/d/optout" \
target="_blank">https://groups.google.com/d/<wbr>optout</a>.<br></p>

<p></p>

-- <br>
<br>
--- <br>
You received this message because you are subscribed to the Google Groups \
&quot;ossec-list&quot; group.<br> To unsubscribe from this group and stop receiving \
emails from it, send an email to <a \
href="mailto:ossec-list+unsubscribe@googlegroups.com" \
target="_blank">ossec-list+unsubscribe@<wbr>googlegroups.com</a>.<br> For more \
options, visit <a href="https://groups.google.com/d/optout" \
target="_blank">https://groups.google.com/d/<wbr>optout</a>.<br> \
</div></div></blockquote></div><br></div>

<p></p>

-- <br />
<br />
--- <br />
You received this message because you are subscribed to the Google Groups \
&quot;ossec-list&quot; group.<br /> To unsubscribe from this group and stop receiving \
emails from it, send an email to <a \
href="mailto:ossec-list+unsubscribe@googlegroups.com">ossec-list+unsubscribe@googlegroups.com</a>.<br \
/> For more options, visit <a \
href="https://groups.google.com/d/optout">https://groups.google.com/d/optout</a>.<br \
/>



[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic