Installing OSSEC in hybrid mode using the FreeBSD "ports" tree.

[Dave Edwards]

Hi,

I doubt anyone can help here but I thought I'd post the question anyway.

Some background..  FreeBSD uses "ports" to install software normally.  Ports are bunches of patches and code which take the source code for an application, patch it to fit the FreeBSD system, compile it and install it automatically.

The "port" for ossec on my system was for version 2.6 but we needed to use hybrid mode so I tried installing using the normal install scripts (install.sh).  But we had some trouble with this method.  It seemed to work ok initially but remoted didn't start up at boot time or when using the ossec-control script and it seemed "flakey" as in the agents would sometime drop off and could not connect again if we started remoted manually.

So I updated the "ports" tree on the FreeBSD 8.0 machine (yep, I know it's a bit long in the tooth..).  The tree now has ossec 2.7 in it so it should support hybrid mode, however installing from the port does not give an option for hybrid mode.

My question is:  How can I manually change an installation from "server" mode to "hybrid" mode without using the standard "install.sh" script?

ciao
dave