Subject: [ossec-list] script 'ossec' missing LSB tags and
overrides - msg#00098

Previous Message by Date:

[ossec-list] ossecalert log file

Hello all, ** Alert 1271055172.24104: mail  - syslog,sshd-->what dose this mean?2010 Apr 12 14:52:52 cl6g505->/var/log/secure --->is it means the alert is save in /var/log/secure? Rule: 5703 (level 10) -> 'Possible breakin attempt (high number of reverse lookup errors).'Src IP: l312c09.sitfypj.nyp.edu.sgUser: (none)Apr 12 14:52:50 cl6g505 sshd[1652]---is it means port no?: reverse mapping checking getaddrinfo for l312c09.sitfypj.nyp.edu.sg failed - POSSIBLE BREAK-IN ATTEMPT! Apr 12 22:26:38 cl6g505 sshd[1360]: reverse mapping checking getaddrinfo for l312c10.sitfypj.nyp.edu.sg failed - POSSIBLE BREAK-IN ATTEMPT!Apr 12 21:21:50 cl6g505 sshd[506]: reverse mapping checking getaddrinfo for l312c09.sitfypj.nyp.edu.sg failed - POSSIBLE BREAK-IN ATTEMPT! Apr 12 21:09:22 cl6g505 sshd[363]: reverse mapping checking getaddrinfo for l312c10.sitfypj.nyp.edu.sg failed - POSSIBLE BREAK-IN ATTEMPT!Apr 12 20:51:20 cl6g505 sshd[311]: reverse mapping checking getaddrinfo for l312c10.sitfypj.nyp.edu.sg failed - POSSIBLE BREAK-IN ATTEMPT!     Can anybody help me look at the qns? Can explain me the whole event about? i need it in a hurry.. thanks=)   Regards, tingyi  

Next Message by Date:

[ossec-list] Quick question regards clustering. AIX HACMP

I am trying to find a little information about OSSEC, We are thinking about installing it on a IBM P Series AIX HACMP cluster, can you confirm that OSSEC is cluster aware or at least compatible with this environment. -- To unsubscribe, reply using "remove me" as the subject.

Previous Message by Thread:

[ossec-list] ossecalert log file

Hello all, ** Alert 1271055172.24104: mail  - syslog,sshd-->what dose this mean?2010 Apr 12 14:52:52 cl6g505->/var/log/secure --->is it means the alert is save in /var/log/secure? Rule: 5703 (level 10) -> 'Possible breakin attempt (high number of reverse lookup errors).'Src IP: l312c09.sitfypj.nyp.edu.sgUser: (none)Apr 12 14:52:50 cl6g505 sshd[1652]---is it means port no?: reverse mapping checking getaddrinfo for l312c09.sitfypj.nyp.edu.sg failed - POSSIBLE BREAK-IN ATTEMPT! Apr 12 22:26:38 cl6g505 sshd[1360]: reverse mapping checking getaddrinfo for l312c10.sitfypj.nyp.edu.sg failed - POSSIBLE BREAK-IN ATTEMPT!Apr 12 21:21:50 cl6g505 sshd[506]: reverse mapping checking getaddrinfo for l312c09.sitfypj.nyp.edu.sg failed - POSSIBLE BREAK-IN ATTEMPT! Apr 12 21:09:22 cl6g505 sshd[363]: reverse mapping checking getaddrinfo for l312c10.sitfypj.nyp.edu.sg failed - POSSIBLE BREAK-IN ATTEMPT!Apr 12 20:51:20 cl6g505 sshd[311]: reverse mapping checking getaddrinfo for l312c10.sitfypj.nyp.edu.sg failed - POSSIBLE BREAK-IN ATTEMPT!     Can anybody help me look at the qns? Can explain me the whole event about? i need it in a hurry.. thanks=)   Regards, tingyi  

Next Message by Thread:

[ossec-list] Quick question regards clustering. AIX HACMP

I am trying to find a little information about OSSEC, We are thinking about installing it on a IBM P Series AIX HACMP cluster, can you confirm that OSSEC is cluster aware or at least compatible with this environment. -- To unsubscribe, reply using "remove me" as the subject.