OSSEC as a hostIDSWithROOTKIT check, exception detection, automatic response, file tampering prevention and other important functions, and open source, free of charge. OSSEC is now available in version 2.7.1RC. For more information, see WWW. OSSEC. NET.
I have recently studied it. Next I will mainly write down how to put OSSEC into the MYSQL file... Some other functions of this study will be updated later .... Smile
1) first install MYSQL
2) Go to the SRC directory of the OSSEC Installation File and execute
# Make setdb
Error: PostgreSQL client libraries not installed.
Info: Compiled with MySQL support.
This prompt will appear.
4) then execute the command in src.
Make all
(If you have installed an ossec server, directly overwrite it once)
After compilation, follow
Http://www.ossec.net/doc/manual/output/mysql-database-output.html create database
Perform permissions and other operations.
Note:Before/var/ossec/bin/ossec-control restart
/Var/ossec/bin/ossec-control enable database
Original article: http://www.usefulshare.com/lion/ossec-mysql.html