ossec-hids-agent - The OSSEC HIDS Client
| Website: | https://www.ossec.net/ |
|---|---|
| License: | GPL |
| Vendor: | https://www.ossec.net |
- Description:
The ossec-hids-agent package contains the agent part of the OSSEC HIDS. Install this package on every system to be monitored.
Packages
| ossec-hids-agent-4.4.0-3.el8.art.aarch64 [969 KiB] |
Changelog
by Support (2026-10-07):
- Build the server with USE_SQLITE=yes so analysisd links sqlite |
Package contents (click to display)
[d] /var/ossec/queue/alerts
[d] /var/ossec/queue/rids [d] /var/ossec/queue/syscheck [f] /var/ossec/etc/internal_options.conf [f] /var/ossec/etc/ossec-agent.conf [f] /var/ossec/etc/ossec.conf.sample [f] /var/ossec/bin/agent-auth [f] /var/ossec/bin/client-execd [f] /var/ossec/bin/client-logcollector [f] /var/ossec/bin/client-syscheckd [f] /var/ossec/bin/manage_agent [f] /var/ossec/bin/ossec-agentd [f] /var/ossec/bin/ossec-client.sh [f] /usr/lib/systemd/system/ossec-hids.service [f] /usr/lib/.build-id/b4/893766e76ba6ef1294d88fe9e374c496296ce6 [f] /usr/lib/.build-id/83/f5332e30732f7158b029beac5e4d663dde4a01 [f] /usr/lib/.build-id/75/6e9ab609cc5200841cce591b79bcf8f3f0db42 [f] /usr/lib/.build-id/43/5f799325c1ec1cc9bd56eee3438081110b2293 [f] /usr/lib/.build-id/39/ebaf2a1d53b1973d27233d8af98ba8b675137f [f] /usr/lib/.build-id/1e/770f07a29d5acfc057daad81a974ed5df2e30e [d] /usr/lib/.build-id/1e [d] /usr/lib/.build-id/39 [d] /usr/lib/.build-id/43 [d] /usr/lib/.build-id/75 [d] /usr/lib/.build-id/83 [d] /usr/lib/.build-id/b4 [d] /usr/lib/.build-id [f] /etc/ossec-init.conf |
| ossec-hids-agent-4.4.0-2.el8.art.aarch64 [969 KiB] |
Changelog
by Support (2026-10-06):
- Patch analysisd pipeline atomics so EL7 GCC 4.8 can build 4.4.0 |
Package contents (click to display)
[d] /var/ossec/queue/alerts
[d] /var/ossec/queue/rids [d] /var/ossec/queue/syscheck [f] /var/ossec/etc/internal_options.conf [f] /var/ossec/etc/ossec-agent.conf [f] /var/ossec/etc/ossec.conf.sample [f] /var/ossec/bin/agent-auth [f] /var/ossec/bin/client-execd [f] /var/ossec/bin/client-logcollector [f] /var/ossec/bin/client-syscheckd [f] /var/ossec/bin/manage_agent [f] /var/ossec/bin/ossec-agentd [f] /var/ossec/bin/ossec-client.sh [f] /usr/lib/systemd/system/ossec-hids.service [f] /usr/lib/.build-id/b4/893766e76ba6ef1294d88fe9e374c496296ce6 [f] /usr/lib/.build-id/83/f5332e30732f7158b029beac5e4d663dde4a01 [f] /usr/lib/.build-id/75/6e9ab609cc5200841cce591b79bcf8f3f0db42 [f] /usr/lib/.build-id/43/5f799325c1ec1cc9bd56eee3438081110b2293 [f] /usr/lib/.build-id/39/ebaf2a1d53b1973d27233d8af98ba8b675137f [f] /usr/lib/.build-id/1e/770f07a29d5acfc057daad81a974ed5df2e30e [d] /usr/lib/.build-id/1e [d] /usr/lib/.build-id/39 [d] /usr/lib/.build-id/43 [d] /usr/lib/.build-id/75 [d] /usr/lib/.build-id/83 [d] /usr/lib/.build-id/b4 [d] /usr/lib/.build-id [f] /etc/ossec-init.conf |
| ossec-hids-agent-4.4.0-1.el8.art.aarch64 [969 KiB] |
Changelog
by Support (2026-10-05):
- Update to 4.4.0 - Windows FIM check_attrs/check_acl, libmaxminddb GeoIP, JSON syslog alerts |
Package contents (click to display)
[d] /var/ossec/queue/alerts
[d] /var/ossec/queue/rids [d] /var/ossec/queue/syscheck [f] /var/ossec/etc/internal_options.conf [f] /var/ossec/etc/ossec-agent.conf [f] /var/ossec/etc/ossec.conf.sample [f] /var/ossec/bin/agent-auth [f] /var/ossec/bin/client-execd [f] /var/ossec/bin/client-logcollector [f] /var/ossec/bin/client-syscheckd [f] /var/ossec/bin/manage_agent [f] /var/ossec/bin/ossec-agentd [f] /var/ossec/bin/ossec-client.sh [f] /usr/lib/systemd/system/ossec-hids.service [f] /usr/lib/.build-id/b4/893766e76ba6ef1294d88fe9e374c496296ce6 [f] /usr/lib/.build-id/83/f5332e30732f7158b029beac5e4d663dde4a01 [f] /usr/lib/.build-id/75/6e9ab609cc5200841cce591b79bcf8f3f0db42 [f] /usr/lib/.build-id/43/5f799325c1ec1cc9bd56eee3438081110b2293 [f] /usr/lib/.build-id/39/ebaf2a1d53b1973d27233d8af98ba8b675137f [f] /usr/lib/.build-id/1e/770f07a29d5acfc057daad81a974ed5df2e30e [d] /usr/lib/.build-id/1e [d] /usr/lib/.build-id/39 [d] /usr/lib/.build-id/43 [d] /usr/lib/.build-id/75 [d] /usr/lib/.build-id/83 [d] /usr/lib/.build-id/b4 [d] /usr/lib/.build-id [f] /etc/ossec-init.conf |
| ossec-hids-agent-4.3.0-1.el8.art.aarch64 [1.1 MiB] |
Changelog
by Support (2026-08-25):
- Update to 4.3.0 - FIM maintenance mode, TCP/TLS syslog_output, ModSecurity audit logs |
Package contents (click to display)
[d] /var/ossec/queue/alerts
[d] /var/ossec/queue/rids [d] /var/ossec/queue/syscheck [f] /var/ossec/etc/internal_options.conf [f] /var/ossec/etc/ossec-agent.conf [f] /var/ossec/etc/ossec.conf.sample [f] /var/ossec/bin/agent-auth [f] /var/ossec/bin/client-execd [f] /var/ossec/bin/client-logcollector [f] /var/ossec/bin/client-syscheckd [f] /var/ossec/bin/manage_agent [f] /var/ossec/bin/ossec-agentd [f] /var/ossec/bin/ossec-client.sh [f] /usr/lib/systemd/system/ossec-hids.service [f] /usr/lib/.build-id/f0/b2ade5faa2a11f56bd2fe98ac4d9039bd56d9e [f] /usr/lib/.build-id/47/837b7498958f25d75904889186e2e19ad390f3 [f] /usr/lib/.build-id/3b/6dfb976f298fabc82a8569ac1083f2767af247 [f] /usr/lib/.build-id/32/30487f970fc9782710a7ff270ed8d03ed75451 [f] /usr/lib/.build-id/2c/b474e6995840a8c4ac85ad237399d538d4f30a [f] /usr/lib/.build-id/27/0a90dd6894b2b050b64224430d48d3cfb9daa5 [d] /usr/lib/.build-id/27 [d] /usr/lib/.build-id/2c [d] /usr/lib/.build-id/32 [d] /usr/lib/.build-id/3b [d] /usr/lib/.build-id/47 [d] /usr/lib/.build-id/f0 [d] /usr/lib/.build-id [f] /etc/ossec-init.conf |
| ossec-hids-agent-4.2.0-1.el8.art.aarch64 [1.1 MiB] |
Changelog
by Support (2026-08-02):
- Update to 4.2.0 - Multi-threaded analysisd pipeline and manager pthread migration - Windows agent installer bundles MinGW/OpenSSL runtime DLLs - Rootcheck alert file-hash enrichment and AIX chroot RNG fix |
Package contents (click to display)
[d] /var/ossec/queue/alerts
[d] /var/ossec/queue/rids [d] /var/ossec/queue/syscheck [f] /var/ossec/etc/internal_options.conf [f] /var/ossec/etc/ossec-agent.conf [f] /var/ossec/etc/ossec.conf.sample [f] /var/ossec/bin/agent-auth [f] /var/ossec/bin/client-execd [f] /var/ossec/bin/client-logcollector [f] /var/ossec/bin/client-syscheckd [f] /var/ossec/bin/manage_agent [f] /var/ossec/bin/ossec-agentd [f] /var/ossec/bin/ossec-client.sh [f] /usr/lib/systemd/system/ossec-hids.service [f] /usr/lib/.build-id/f2/128b986b1f839ad941841a726e8724257f37a6 [f] /usr/lib/.build-id/c3/a2560e32cc75b4f3109e84999510291381c03f [f] /usr/lib/.build-id/58/0291db0fac52ed0f83a09f02597abd36134f3a [f] /usr/lib/.build-id/2b/104e5e9e5695e1bdac5f74d6db4776ea825977 [f] /usr/lib/.build-id/26/a7e7427dceac89adbaade96e20212794f60294 [f] /usr/lib/.build-id/03/37cd3c303ccc3f378857ab1c7afcdd15fce900 [d] /usr/lib/.build-id/03 [d] /usr/lib/.build-id/26 [d] /usr/lib/.build-id/2b [d] /usr/lib/.build-id/58 [d] /usr/lib/.build-id/c3 [d] /usr/lib/.build-id/f2 [d] /usr/lib/.build-id [f] /etc/ossec-init.conf |
| ossec-hids-agent-4.1.0-1.el8.art.aarch64 [1.0 MiB] |
Changelog
by Support (2026-06-22):
- Update to 4.1.0 - Add Fedora 44 and Ubuntu 26 builds - Modern APT repo signing for Debian 13+ - Require file-devel for libmagic (USE_MAGIC in 4.1.0) - Require libmagic-dev for Debian/Ubuntu builds |
Package contents (click to display)
[d] /var/ossec/queue/alerts
[d] /var/ossec/queue/rids [d] /var/ossec/queue/syscheck [f] /var/ossec/etc/internal_options.conf [f] /var/ossec/etc/ossec-agent.conf [f] /var/ossec/etc/ossec.conf.sample [f] /var/ossec/bin/agent-auth [f] /var/ossec/bin/client-execd [f] /var/ossec/bin/client-logcollector [f] /var/ossec/bin/client-syscheckd [f] /var/ossec/bin/manage_agent [f] /var/ossec/bin/ossec-agentd [f] /var/ossec/bin/ossec-client.sh [f] /usr/lib/systemd/system/ossec-hids.service [f] /usr/lib/.build-id/f6/9ffdd01c56f0b2a58870b2efc8931470a283b1 [f] /usr/lib/.build-id/ea/3b91b49979e1c0cd2b2a26b4e103cee5c411ca [f] /usr/lib/.build-id/e7/27b499d81aa288ab94a7125ef39198f04d0409 [f] /usr/lib/.build-id/60/8088e4ce3743c384a7ebe0c3ad1c64017483b4 [f] /usr/lib/.build-id/47/9a8c795bda742f9fb1ad7323ae554eef5f5d94 [f] /usr/lib/.build-id/26/94ae76fb7134faa5193fed1a5d64f3f03dab41 [d] /usr/lib/.build-id/26 [d] /usr/lib/.build-id/47 [d] /usr/lib/.build-id/60 [d] /usr/lib/.build-id/e7 [d] /usr/lib/.build-id/ea [d] /usr/lib/.build-id/f6 [d] /usr/lib/.build-id [f] /etc/ossec-init.conf |
| ossec-hids-agent-4.0.0-1.el8.art.aarch64 [1.0 MiB] |
Changelog
by Support (2026-02-01):
- Update to 4.0.0 - Critical security fixes for memory safety - Modernized FIM with SHA-256 support - Default AES encryption for agents |
Package contents (click to display)
[d] /var/ossec/queue/alerts
[d] /var/ossec/queue/rids [d] /var/ossec/queue/syscheck [f] /var/ossec/etc/internal_options.conf [f] /var/ossec/etc/ossec-agent.conf [f] /var/ossec/etc/ossec.conf.sample [f] /var/ossec/bin/agent-auth [f] /var/ossec/bin/client-execd [f] /var/ossec/bin/client-logcollector [f] /var/ossec/bin/client-syscheckd [f] /var/ossec/bin/manage_agent [f] /var/ossec/bin/ossec-agentd [f] /var/ossec/bin/ossec-client.sh [f] /usr/lib/systemd/system/ossec-hids.service [f] /usr/lib/.build-id/98/20ea23d2620c656fe7b2b1709ce413ec8e4791 [f] /usr/lib/.build-id/78/f84dbfde7ad0f2b8c0d5b25eec16166ed3a627 [f] /usr/lib/.build-id/73/a347588a24251a21888c515c65f53002f4de78 [f] /usr/lib/.build-id/69/777fdbba94ca018390003e3c2ce2720cdf40df [f] /usr/lib/.build-id/67/0415e70cf80ef306bdf2a620a140042e56a81c [f] /usr/lib/.build-id/10/d778724bb1c608dfdd91aa224dcd18a9bafc70 [d] /usr/lib/.build-id/10 [d] /usr/lib/.build-id/67 [d] /usr/lib/.build-id/69 [d] /usr/lib/.build-id/73 [d] /usr/lib/.build-id/78 [d] /usr/lib/.build-id/98 [d] /usr/lib/.build-id [f] /etc/ossec-init.conf |