Search found 5 matches

by greenhouse
Tue Jun 29, 2021 6:22 am
Forum: OSSEC
Topic: After installing 3.6.0 it doesn't start due to Could not open file '/var/ossec/ossec-agent/etc/internal_options.conf'
Replies: 4
Views: 15883

Re: After installing 3.6.0 it doesn't start due to Could not open file '/var/ossec/ossec-agent/etc/internal_options.conf

Ah sorry, I promise, last email.
I just realized how much I missed its emails...

Great tool, I really appreciate it.
by greenhouse
Tue Jun 29, 2021 5:56 am
Forum: OSSEC
Topic: After installing 3.6.0 it doesn't start due to Could not open file '/var/ossec/ossec-agent/etc/internal_options.conf'
Replies: 4
Views: 15883

Re: After installing 3.6.0 it doesn't start due to Could not open file '/var/ossec/ossec-agent/etc/internal_options.conf

I am intrigued by this error. cat /etc/ossec-init.conf DIRECTORY="/var/ossec" VERSION="v3.6.0" DATE="Tue 29 Jun 09:33:45 GMT 2021" TYPE="local" and interestingly strace -e trace=open -f /var/ossec/bin/ossec-logtest 2021/06/29 09:47:05 ossec-testrule(1226): ERR...
by greenhouse
Tue Jun 29, 2021 5:34 am
Forum: OSSEC
Topic: After installing 3.6.0 it doesn't start due to Could not open file '/var/ossec/ossec-agent/etc/internal_options.conf'
Replies: 4
Views: 15883

Re: After installing 3.6.0 it doesn't start due to Could not open file '/var/ossec/ossec-agent/etc/internal_options.conf

I just ran USE_GEOIP=yes ./install.sh again, please see below. It seems this forum has a problem with its SPF record: 2021-06-28 10:29:32 H=(www3.atomicorp.com) [74.208.64.153]:34686 I=[XXXX]:25 X=TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256 CV=no F=<atomicforums@forums.atomicorp.com> rejected RCPT <tom@...
by greenhouse
Tue Jun 29, 2021 4:57 am
Forum: OSSEC
Topic: After installing 3.6.0 it doesn't start due to Could not open file '/var/ossec/ossec-agent/etc/internal_options.conf'
Replies: 4
Views: 15883

Re: After installing 3.6.0 it doesn't start due to Could not open file '/var/ossec/ossec-agent/etc/internal_options.conf

I might have tried that in an much earlier attempt to get it working again.
This particular run I definitely chose "local".
by greenhouse
Mon Jun 28, 2021 6:43 am
Forum: OSSEC
Topic: After installing 3.6.0 it doesn't start due to Could not open file '/var/ossec/ossec-agent/etc/internal_options.conf'
Replies: 4
Views: 15883

After installing 3.6.0 it doesn't start due to Could not open file '/var/ossec/ossec-agent/etc/internal_options.conf'

Hi, I have been an OSSEC user for many, many years and it's a great product. With the latest version I keep having this problem that it doesn't want to start at all. It's a fresh, "local" install and I moved my old, somwhat broken, install out of the way. I am on a Debian 10.10 and I insta...