OSSEC Hostbased Intrusion Detection System

drainpipe · 03-05-2015, 07:52 AM

Ossec server is supposed to be listening at UDP port 1514 but my connection does not appear to be working, based on Netstat -np | grep 1514 not returning any rows.

I have checked my IPTABLES and port 1514 is enabled OK there.

Can anyone advise me, why Ossec is not showing port 1514 to be listening?

Thank you.

unSpawn · 03-07-2015, 05:30 AM

Quote:

Originally Posted by drainpipe

Ossec server is supposed to be listening at UDP port 1514 but my connection does not appear to be working, based on Netstat -np | grep 1514 not returning any rows.

Having the port open is a result of properly configuring OSSEC HIDS, so check its documented installation steps and configure it first, then restart the services (not server) as required then check its log files for clues. If you have tried and can't fix it yourself post the steps you took, your config and any stdout / stderr / log file errors.