Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 24 Nov 2011 09:32:41 +0200
From:      Ross <basarevych@gmail.com>
To:        freebsd-questions@freebsd.org
Subject:   Do you run OSSEC on 9.0?
Message-ID:  <CANmv3=yDOqZQ0E+9EE1i3a5vXBs7D7tvQx7Ag27Rc1Ba9ZJGbQ@mail.gmail.com>

Next in thread | Raw E-Mail | Index | Archive | Help
I am getting emails about hidden files in /dev. Before that (on 8.2)
everything was OK. What should I do?


OSSEC HIDS Notification.
2011 Nov 24 08:17:25

Received From: coffin->rootcheck
Rule: 510 fired (level 7) -> "Host-based anomaly detection event (rootcheck)."
Portion of the log(s):

Files hidden inside directory '/dev'. Link count does not match number
of files (9,27).



 --END OF NOTIFICATION



Want to link to this message? Use this URL: <http://docs.FreeBSD.org/cgi/mid.cgi?CANmv3=yDOqZQ0E+9EE1i3a5vXBs7D7tvQx7Ag27Rc1Ba9ZJGbQ>