Help with OSSIM 2.2
 

Hi Guys,

I was wondering if anyone has installed and configuerd OSSIM 2.2...
Cuz what I'm doing is installing it on a VM on my ESXi server, and then I install the OCS and OSSIM agents on the hosts, but I don't get them in the inventory nor in the reports...
Is there somewhare to add agents on the server itself maybe?
any ideas?

Thanks,
Johnny

If you are sure OSSIM can be reached over your network (do test!) then see if the agents can log data locally (verbose or debug args?). If they do then maybe run a tcpdump (or iptables -j LOG rules) on the agent host to see what traffic goes where. If agent traffic goes out into your network then maybe on the OSSIM host run a tcpdump (or iptables -j LOG rules) to see if agent traffic gets there. If agent traffic gets there maybe check your OSSIM configuration and log files for clues.


//NTLB