error in latest ossec package?

Customer support forums for Atomic Protector (formerly Atomic Secured Linux). There is no such thing as a bad question here as long as it pertains to using Atomic Protector. Newbies feel free to get help getting started or asking questions that may be obvious. Regular users are asked to be gentle. :-)
BruceLee
Forum Regular
Forum Regular
Posts: 879
Joined: Sat Mar 28, 2009 6:58 pm
Location: Germany

error in latest ossec package?

Unread post by BruceLee »

Hi,

opened a ticket but portal got closed. posting shuns me.
since the latest ossec update asl gui has no new entries anymore.
ossec-hids restarts periodically every few minutes.
its complaining about a level column in alert table that does not exist.
mysql-db is fine.
thanks
User avatar
mikeshinn
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin
Posts: 4155
Joined: Thu Feb 07, 2008 7:49 pm
Location: Chantilly, VA

Re: error in latest ossec package?

Unread post by mikeshinn »

That can happen if you're using ASL 3.2.x or older. You'll want to upgrade to 4.x to enjoy the enhancements in OSSEC:

https://www.atomicorp.com/wiki/index.ph ... 3.2_to_4.0
BruceLee
Forum Regular
Forum Regular
Posts: 879
Joined: Sat Mar 28, 2009 6:58 pm
Location: Germany

Re: error in latest ossec package?

Unread post by BruceLee »

no way around it for now? i would like to avoid just upgrading. i have no time to read through docs now.
does the upgrade leave all the settings of version 3.2.x the way they are? or does it change them?

thanks
BruceLee
Forum Regular
Forum Regular
Posts: 879
Joined: Sat Mar 28, 2009 6:58 pm
Location: Germany

Re: error in latest ossec package?

Unread post by BruceLee »

:( I hate it being forced to upgrade a core component by a package update that way.
If ASL4 is mandatory why isn't it a dependency or at least mentioned in the release?!
So now I have no real choice than upgrading ASL or downgrading ossec which might cause other errors.
:(
EDIT:
Upgraded.
I was asked about asl console acl IP access. What kind of access should that be and is 127.0.0.1 in this list by default? What is it?
Thanks.
scott
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin
Posts: 8355
Joined: Wed Dec 31, 1969 8:00 pm
Location: earth
Contact:

Re: error in latest ossec package?

Unread post by scott »

ASL Console is the port 30000 web interface. You can enter your IP(s) there to restrict access, or if you go with the defaults its open to the world.
BruceLee
Forum Regular
Forum Regular
Posts: 879
Joined: Sat Mar 28, 2009 6:58 pm
Location: Germany

Re: error in latest ossec package?

Unread post by BruceLee »

Another one. It was not about the WEB Console Whitelist. I was asked the questions multiple times. The latter was about Web...this one was different and asked at first or second place. I don't have the exact wording in my mind.
EDIT: OK. Mixed it up during the process. Checked the logs and there is only one Console ACL question.
Post Reply