This is an active response script for OSSEC(https://www.ossec.net/), written in perl, to send jabber(xmpp) messages of certain alerts.
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Dominik Meyer 28509dd03d
ADD: deactivated tests for the moment
3 달 전
bin ADD: added first version of the script 3 달 전
.gitignore ADD: ignore some files 3 달 전
LICENSE.txt ADD: added LICENSE.txt for git repository 3 달 전
README.md ADD: updated README.md 3 달 전
dist.ini ADD: deactivated tests for the moment 3 달 전

README.md

OSSEC-Jabber

Description

This is an active response script for OSSEC(https://www.ossec.net/), written in perl, to send jabber(xmpp) messages of certain alerts.

Requirements

  • Perl
  • sendxmpp program
  • OSSEC Perl Module

INSTALL

Stable Version

The stable version can always be installed from CPAN using the cpan tool of your linux distribution.

Git install

For installing fresh from the git repository you need a perl installation including the Dist::Zilla package. The use of plenv(https://github.com/tokuhirom/plenv) is encouraged.

git clone https://gitcloud.federationhq.de/byterazor/App-OSSEC-Jabber.git
cd App-OSSEC-Jabber
dzil build
cpanm App-OSSEC-Jaber<version>.tar.gz

OSSEC specific

  • Please link the script into your OSSEC active response bin directory to be able to execute it.
  • configure the command in your ossec.conf
  • configure the active response for every alert leve/ rule you want the command to be triggert
  • place a jabber.conf file in your ossec etc directory

Example jabber.conf

<config>
  <options>-t</options>
  <recipients>
    <recipient>your@jabber.de</recipient>
  </recipients>
</config>

sendxmpp

Plase make sure sendxmpp is installed and you have a working configuration to send jabber messages to your recipients.

Author

Dominik Meyer dmeyer@federationhq.de

LICENSE

GPLv3