Search found 5 matches

by jasonmg
Fri Oct 10, 2014 7:39 pm
Forum: General Help and Development Discussion
Topic: Ossec Max agents
Replies: 11
Views: 17265

Re: Ossec Max agents

That will be an excellent improvement. Thanks for replying. One odd thing though... I re-created the RPMs using that spec file and I still receive the max agents error. Are you aware of anything else (besides max open files not being high enough) that would cause that error? I also verified I see th...
by jasonmg
Fri Oct 10, 2014 3:53 pm
Forum: General Help and Development Discussion
Topic: Ossec Max agents
Replies: 11
Views: 17265

Re: Ossec Max agents

I took a look at the spec file in the source RPM (just noticed you had it available). The spec file is setting the max agents to 16384 before it compiles...

# Increase max agents
echo "HEXTRA=-DMAX_AGENTS=16384" >> ./Config.OS
by jasonmg
Thu Oct 09, 2014 6:24 pm
Forum: General Help and Development Discussion
Topic: Ossec Max agents
Replies: 11
Views: 17265

Re: Ossec Max agents

Thank you for your quick reply.

Just to make sure... You are saying the ossec-hids-server rpm located here: http://www5.atomicorp.com/channels/osse ... 6_64/RPMS/ is not the same OSSEC RPM being referred to above that is set to 8092 max agents? Instead it is set to 256?
by jasonmg
Thu Oct 09, 2014 5:11 pm
Forum: General Help and Development Discussion
Topic: Ossec Max agents
Replies: 11
Views: 17265

Re: Ossec Max agents

I am only installing OSSEC via the ossec-hids-server-2.8.1-47.el6.art.x86_64 RPM. Is there a different OSSEC server RPM you get when you install ASL?
by jasonmg
Thu Oct 09, 2014 12:56 am
Forum: General Help and Development Discussion
Topic: Ossec Max agents
Replies: 11
Views: 17265

Re: Ossec Max agents

Can anyone confirm that it is 8092? I am using ossec-hids-server-2.8.1-47.el6.art.x86_64 on RHEL 6.3. The max open files is set to 10,000. However, remoted is still showing that the max agents is 256. 2014/10/08 21:02:25 ossec-remoted: INFO: Started (pid: 28839). 2014/10/08 21:02:25 ossec-remoted(41...