Date: Thu, 24 Nov 2011 12:04:52 +0300 From: Odhiambo Washington <odhiambo@gmail.com> To: Ross <basarevych@gmail.com> Cc: freebsd-questions@freebsd.org Subject: Re: Do you run OSSEC on 9.0? Message-ID: <CAAdA2WMXBZdCkxas=yT=YSYu4P6HE7sUKOvZRvHdhCx9m7GnTQ@mail.gmail.com> In-Reply-To: <CANmv3=yDOqZQ0E%2B9EE1i3a5vXBs7D7tvQx7Ag27Rc1Ba9ZJGbQ@mail.gmail.com> References: <CANmv3=yDOqZQ0E%2B9EE1i3a5vXBs7D7tvQx7Ag27Rc1Ba9ZJGbQ@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
--0016e658614ec1602804b27756d9 Content-Type: text/plain; charset=UTF-8 Getting the same too, since I upgraded my 8.2 -> 9.0-PRE. Would be interested in the answers too. On Thu, Nov 24, 2011 at 10:32, Ross <basarevych@gmail.com> wrote: > I am getting emails about hidden files in /dev. Before that (on 8.2) > everything was OK. What should I do? > > > OSSEC HIDS Notification. > 2011 Nov 24 08:17:25 > > Received From: coffin->rootcheck > Rule: 510 fired (level 7) -> "Host-based anomaly detection event > (rootcheck)." > Portion of the log(s): > > Files hidden inside directory '/dev'. Link count does not match number > of files (9,27). > > > > --END OF NOTIFICATION > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to " > freebsd-questions-unsubscribe@freebsd.org" > -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ I can't hear you -- I'm using the scrambler. Please consider the environment before printing this email. --0016e658614ec1602804b27756d9--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAAdA2WMXBZdCkxas=yT=YSYu4P6HE7sUKOvZRvHdhCx9m7GnTQ>