ossec-hids-agent - The OSSEC HIDS Client
| Website: | https://www.ossec.net/ |
|---|---|
| License: | GPL |
| Vendor: | https://www.ossec.net |
- Description:
The ossec-hids-agent package contains the agent part of the OSSEC HIDS. Install this package on every system to be monitored.
Packages
| ossec-hids-agent-4.4.0-1.el8.art.aarch64 [969 KiB] |
Changelog
by Support (2026-10-05):
- Update to 4.4.0 - Windows FIM check_attrs/check_acl, libmaxminddb GeoIP, JSON syslog alerts |
Package contents (click to display)
[d] /var/ossec/queue/alerts
[d] /var/ossec/queue/rids [d] /var/ossec/queue/syscheck [f] /var/ossec/etc/internal_options.conf [f] /var/ossec/etc/ossec-agent.conf [f] /var/ossec/etc/ossec.conf.sample [f] /var/ossec/bin/agent-auth [f] /var/ossec/bin/client-execd [f] /var/ossec/bin/client-logcollector [f] /var/ossec/bin/client-syscheckd [f] /var/ossec/bin/manage_agent [f] /var/ossec/bin/ossec-agentd [f] /var/ossec/bin/ossec-client.sh [f] /usr/lib/systemd/system/ossec-hids.service [f] /usr/lib/.build-id/b4/893766e76ba6ef1294d88fe9e374c496296ce6 [f] /usr/lib/.build-id/83/f5332e30732f7158b029beac5e4d663dde4a01 [f] /usr/lib/.build-id/75/6e9ab609cc5200841cce591b79bcf8f3f0db42 [f] /usr/lib/.build-id/43/5f799325c1ec1cc9bd56eee3438081110b2293 [f] /usr/lib/.build-id/39/ebaf2a1d53b1973d27233d8af98ba8b675137f [f] /usr/lib/.build-id/1e/770f07a29d5acfc057daad81a974ed5df2e30e [d] /usr/lib/.build-id/1e [d] /usr/lib/.build-id/39 [d] /usr/lib/.build-id/43 [d] /usr/lib/.build-id/75 [d] /usr/lib/.build-id/83 [d] /usr/lib/.build-id/b4 [d] /usr/lib/.build-id [f] /etc/ossec-init.conf |
| ossec-hids-agent-4.3.0-1.el8.art.aarch64 [1.1 MiB] |
Changelog
by Support (2026-08-25):
- Update to 4.3.0 - FIM maintenance mode, TCP/TLS syslog_output, ModSecurity audit logs |
Package contents (click to display)
[d] /var/ossec/queue/alerts
[d] /var/ossec/queue/rids [d] /var/ossec/queue/syscheck [f] /var/ossec/etc/internal_options.conf [f] /var/ossec/etc/ossec-agent.conf [f] /var/ossec/etc/ossec.conf.sample [f] /var/ossec/bin/agent-auth [f] /var/ossec/bin/client-execd [f] /var/ossec/bin/client-logcollector [f] /var/ossec/bin/client-syscheckd [f] /var/ossec/bin/manage_agent [f] /var/ossec/bin/ossec-agentd [f] /var/ossec/bin/ossec-client.sh [f] /usr/lib/systemd/system/ossec-hids.service [f] /usr/lib/.build-id/f0/b2ade5faa2a11f56bd2fe98ac4d9039bd56d9e [f] /usr/lib/.build-id/47/837b7498958f25d75904889186e2e19ad390f3 [f] /usr/lib/.build-id/3b/6dfb976f298fabc82a8569ac1083f2767af247 [f] /usr/lib/.build-id/32/30487f970fc9782710a7ff270ed8d03ed75451 [f] /usr/lib/.build-id/2c/b474e6995840a8c4ac85ad237399d538d4f30a [f] /usr/lib/.build-id/27/0a90dd6894b2b050b64224430d48d3cfb9daa5 [d] /usr/lib/.build-id/27 [d] /usr/lib/.build-id/2c [d] /usr/lib/.build-id/32 [d] /usr/lib/.build-id/3b [d] /usr/lib/.build-id/47 [d] /usr/lib/.build-id/f0 [d] /usr/lib/.build-id [f] /etc/ossec-init.conf |
| ossec-hids-agent-4.2.0-1.el8.art.aarch64 [1.1 MiB] |
Changelog
by Support (2026-08-02):
- Update to 4.2.0 - Multi-threaded analysisd pipeline and manager pthread migration - Windows agent installer bundles MinGW/OpenSSL runtime DLLs - Rootcheck alert file-hash enrichment and AIX chroot RNG fix |
Package contents (click to display)
[d] /var/ossec/queue/alerts
[d] /var/ossec/queue/rids [d] /var/ossec/queue/syscheck [f] /var/ossec/etc/internal_options.conf [f] /var/ossec/etc/ossec-agent.conf [f] /var/ossec/etc/ossec.conf.sample [f] /var/ossec/bin/agent-auth [f] /var/ossec/bin/client-execd [f] /var/ossec/bin/client-logcollector [f] /var/ossec/bin/client-syscheckd [f] /var/ossec/bin/manage_agent [f] /var/ossec/bin/ossec-agentd [f] /var/ossec/bin/ossec-client.sh [f] /usr/lib/systemd/system/ossec-hids.service [f] /usr/lib/.build-id/f2/128b986b1f839ad941841a726e8724257f37a6 [f] /usr/lib/.build-id/c3/a2560e32cc75b4f3109e84999510291381c03f [f] /usr/lib/.build-id/58/0291db0fac52ed0f83a09f02597abd36134f3a [f] /usr/lib/.build-id/2b/104e5e9e5695e1bdac5f74d6db4776ea825977 [f] /usr/lib/.build-id/26/a7e7427dceac89adbaade96e20212794f60294 [f] /usr/lib/.build-id/03/37cd3c303ccc3f378857ab1c7afcdd15fce900 [d] /usr/lib/.build-id/03 [d] /usr/lib/.build-id/26 [d] /usr/lib/.build-id/2b [d] /usr/lib/.build-id/58 [d] /usr/lib/.build-id/c3 [d] /usr/lib/.build-id/f2 [d] /usr/lib/.build-id [f] /etc/ossec-init.conf |
| ossec-hids-agent-4.1.0-1.el8.art.aarch64 [1.0 MiB] |
Changelog
by Support (2026-06-22):
- Update to 4.1.0 - Add Fedora 44 and Ubuntu 26 builds - Modern APT repo signing for Debian 13+ - Require file-devel for libmagic (USE_MAGIC in 4.1.0) - Require libmagic-dev for Debian/Ubuntu builds |
Package contents (click to display)
[d] /var/ossec/queue/alerts
[d] /var/ossec/queue/rids [d] /var/ossec/queue/syscheck [f] /var/ossec/etc/internal_options.conf [f] /var/ossec/etc/ossec-agent.conf [f] /var/ossec/etc/ossec.conf.sample [f] /var/ossec/bin/agent-auth [f] /var/ossec/bin/client-execd [f] /var/ossec/bin/client-logcollector [f] /var/ossec/bin/client-syscheckd [f] /var/ossec/bin/manage_agent [f] /var/ossec/bin/ossec-agentd [f] /var/ossec/bin/ossec-client.sh [f] /usr/lib/systemd/system/ossec-hids.service [f] /usr/lib/.build-id/f6/9ffdd01c56f0b2a58870b2efc8931470a283b1 [f] /usr/lib/.build-id/ea/3b91b49979e1c0cd2b2a26b4e103cee5c411ca [f] /usr/lib/.build-id/e7/27b499d81aa288ab94a7125ef39198f04d0409 [f] /usr/lib/.build-id/60/8088e4ce3743c384a7ebe0c3ad1c64017483b4 [f] /usr/lib/.build-id/47/9a8c795bda742f9fb1ad7323ae554eef5f5d94 [f] /usr/lib/.build-id/26/94ae76fb7134faa5193fed1a5d64f3f03dab41 [d] /usr/lib/.build-id/26 [d] /usr/lib/.build-id/47 [d] /usr/lib/.build-id/60 [d] /usr/lib/.build-id/e7 [d] /usr/lib/.build-id/ea [d] /usr/lib/.build-id/f6 [d] /usr/lib/.build-id [f] /etc/ossec-init.conf |
| ossec-hids-agent-4.0.0-1.el8.art.aarch64 [1.0 MiB] |
Changelog
by Support (2026-02-01):
- Update to 4.0.0 - Critical security fixes for memory safety - Modernized FIM with SHA-256 support - Default AES encryption for agents |
Package contents (click to display)
[d] /var/ossec/queue/alerts
[d] /var/ossec/queue/rids [d] /var/ossec/queue/syscheck [f] /var/ossec/etc/internal_options.conf [f] /var/ossec/etc/ossec-agent.conf [f] /var/ossec/etc/ossec.conf.sample [f] /var/ossec/bin/agent-auth [f] /var/ossec/bin/client-execd [f] /var/ossec/bin/client-logcollector [f] /var/ossec/bin/client-syscheckd [f] /var/ossec/bin/manage_agent [f] /var/ossec/bin/ossec-agentd [f] /var/ossec/bin/ossec-client.sh [f] /usr/lib/systemd/system/ossec-hids.service [f] /usr/lib/.build-id/98/20ea23d2620c656fe7b2b1709ce413ec8e4791 [f] /usr/lib/.build-id/78/f84dbfde7ad0f2b8c0d5b25eec16166ed3a627 [f] /usr/lib/.build-id/73/a347588a24251a21888c515c65f53002f4de78 [f] /usr/lib/.build-id/69/777fdbba94ca018390003e3c2ce2720cdf40df [f] /usr/lib/.build-id/67/0415e70cf80ef306bdf2a620a140042e56a81c [f] /usr/lib/.build-id/10/d778724bb1c608dfdd91aa224dcd18a9bafc70 [d] /usr/lib/.build-id/10 [d] /usr/lib/.build-id/67 [d] /usr/lib/.build-id/69 [d] /usr/lib/.build-id/73 [d] /usr/lib/.build-id/78 [d] /usr/lib/.build-id/98 [d] /usr/lib/.build-id [f] /etc/ossec-init.conf |
| ossec-hids-agent-3.8.0-35114.el8.art.aarch64 [1016 KiB] |
Changelog
by Support (2025-01-07):
- Update to 3.8.0 - Added ossec service files for agent/server - Basic SElinux policy in %post - Reduced external dependencies |
Package contents (click to display)
[d] /var/ossec/queue/alerts
[d] /var/ossec/queue/rids [d] /var/ossec/queue/syscheck [f] /var/ossec/etc/internal_options.conf [f] /var/ossec/etc/ossec-agent.conf [f] /var/ossec/etc/ossec.conf.sample [f] /var/ossec/bin/agent-auth [f] /var/ossec/bin/client-execd [f] /var/ossec/bin/client-logcollector [f] /var/ossec/bin/client-syscheckd [f] /var/ossec/bin/manage_agent [f] /var/ossec/bin/ossec-agentd [f] /var/ossec/bin/ossec-client.sh [f] /usr/lib/systemd/system/ossec-hids.service [f] /usr/lib/.build-id/f9/2046097b6ef23dfe93e53547bdd6b2f8a2ad55 [f] /usr/lib/.build-id/f8/f9b52a58d889e4073e051401387c1c4ff1e477 [f] /usr/lib/.build-id/c7/e26a800b2486e33f2ab42b7086c0cce7d93559 [f] /usr/lib/.build-id/71/eaf26d4398df2b04668beed53958de765ec464 [f] /usr/lib/.build-id/4d/0be92aacc3d7de874efffa16af209a722c8a2f [f] /usr/lib/.build-id/46/d47f565f029b3799d6741466c6926a2a1903f5 [d] /usr/lib/.build-id/46 [d] /usr/lib/.build-id/4d [d] /usr/lib/.build-id/71 [d] /usr/lib/.build-id/c7 [d] /usr/lib/.build-id/f8 [d] /usr/lib/.build-id/f9 [d] /usr/lib/.build-id [f] /etc/ossec-init.conf |
| ossec-hids-agent-3.7.0-32615.el8.art.aarch64 [315 KiB] |
Changelog
by Support (2022-10-12):
- Add support for EL9 |
Package contents (click to display)
[d] /var/ossec/queue/alerts
[d] /var/ossec/queue/rids [d] /var/ossec/queue/syscheck [f] /var/ossec/ossec-agent/etc/shared/acsc_office2016_rcl.txt [f] /var/ossec/ossec-agent/etc/shared/cis_apache2224_rcl.txt [f] /var/ossec/ossec-agent/etc/shared/cis_debian_linux_rcl.txt [f] /var/ossec/ossec-agent/etc/shared/cis_debianlinux7-8_L1_rcl.txt [f] /var/ossec/ossec-agent/etc/shared/cis_debianlinux7-8_L2_rcl.txt [f] /var/ossec/ossec-agent/etc/shared/cis_mysql5-6_community_rcl.txt [f] /var/ossec/ossec-agent/etc/shared/cis_mysql5-6_enterprise_rcl.txt [f] /var/ossec/ossec-agent/etc/shared/cis_rhel5_linux_rcl.txt [f] /var/ossec/ossec-agent/etc/shared/cis_rhel6_linux_rcl.txt [f] /var/ossec/ossec-agent/etc/shared/cis_rhel7_linux_rcl.txt [f] /var/ossec/ossec-agent/etc/shared/cis_rhel_linux_rcl.txt [f] /var/ossec/ossec-agent/etc/shared/cis_sles11_linux_rcl.txt [f] /var/ossec/ossec-agent/etc/shared/cis_sles12_linux_rcl.txt [f] /var/ossec/ossec-agent/etc/shared/cis_solaris11_rcl.txt [f] /var/ossec/ossec-agent/etc/shared/cis_win10_enterprise_L1_rcl.txt [f] /var/ossec/ossec-agent/etc/shared/cis_win10_enterprise_L2_rcl.txt [f] /var/ossec/ossec-agent/etc/shared/cis_win2012r2_domainL1_rcl.txt [f] /var/ossec/ossec-agent/etc/shared/cis_win2012r2_domainL2_rcl.txt [f] /var/ossec/ossec-agent/etc/shared/cis_win2012r2_memberL1_rcl.txt [f] /var/ossec/ossec-agent/etc/shared/cis_win2012r2_memberL2_rcl.txt [f] /var/ossec/ossec-agent/etc/shared/cis_win2016_domainL1_rcl.txt [f] /var/ossec/ossec-agent/etc/shared/cis_win2016_domainL2_rcl.txt [f] /var/ossec/ossec-agent/etc/shared/cis_win2016_memberL1_rcl.txt [f] /var/ossec/ossec-agent/etc/shared/cis_win2016_memberL2_rcl.txt [f] /var/ossec/ossec-agent/etc/shared/rootkit_files.txt [f] /var/ossec/ossec-agent/etc/shared/rootkit_trojans.txt [f] /var/ossec/ossec-agent/etc/shared/system_audit_pw.txt [f] /var/ossec/ossec-agent/etc/shared/system_audit_rcl.txt [f] /var/ossec/ossec-agent/etc/shared/system_audit_ssh.txt [f] /var/ossec/ossec-agent/etc/shared/win_applications_rcl.txt [f] /var/ossec/ossec-agent/etc/shared/win_audit_rcl.txt [f] /var/ossec/ossec-agent/etc/shared/win_malware_rcl.txt [f] /var/ossec/etc/shared/agent.conf [f] /var/ossec/etc/internal_options.conf [f] /var/ossec/etc/ossec-agent.conf [f] /var/ossec/etc/ossec.conf.sample [f] /var/ossec/bin/agent-auth [f] /var/ossec/bin/client-logcollector [f] /var/ossec/bin/client-syscheckd [f] /var/ossec/bin/manage_agent [f] /var/ossec/bin/ossec-agentd [f] /var/ossec/bin/ossec-client.sh [f] /var/ossec/bin/ossec-execd [f] /usr/lib/.build-id/ef/44f973d7aa0492859c9565037ef6c8a8df3ca2 [f] /usr/lib/.build-id/bf/a2f83eb65cc5afbf185ce8b3a7853bf50a72f8 [f] /usr/lib/.build-id/b3/7ae842802d0737da34614a59d111b28da1d605 [f] /usr/lib/.build-id/7c/46f515b0afca5144d4766ae0a07739bf55612d [f] /usr/lib/.build-id/79/f63b2d35c6443200bcdee0710eedf29151864d [f] /usr/lib/.build-id/3a/bfc54f71523959954e4d230df0593b1829b464 [d] /usr/lib/.build-id/3a [d] /usr/lib/.build-id/79 [d] /usr/lib/.build-id/7c [d] /usr/lib/.build-id/b3 [d] /usr/lib/.build-id/bf [d] /usr/lib/.build-id/ef [d] /usr/lib/.build-id [f] /etc/rc.d/init.d/ossec-hids [f] /etc/ossec-init.conf |