search

ossec / ossec-hids

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.
http://www.ossec.net
Other
4.33k stars 1.02k forks source link

syslog_output on Solaris 11.4 (SPARC), OSSEC 3.7.0 #2083

Open kmack872564099 opened 1 year ago

kmack872564099 commented 1 year ago

I'm unable to get this feature working on Solaris 11.4. The build is local.

The option is coded correctly and works on Linux:

*redacted* 514 cef

Error message: getaddrinfo: non-recoverable name resolution failure ossec-csyslogd(1216): ERROR: Unable to connect to 'redacted'.

The error appears to be from OS_Connect() in os_net.c

OS_Connect() appears to work for resolving and then opening a socket for mail: INFO: Connected to redacted at address redacted, port 25

Name resolution is working for both the syslog and SMTP servers.

I've tried both using both numeric addresses and hostnames.

The gcc version is 12.2.0.