Re: [ossec-list] How to fix ossec-execd(1312): ERROR: Error executing '/var/ossec/active-response/bin/restart-agent.cmd': Exec format error ?

2019-01-14 Thread dan (ddp)
I was able to restart the ossec agent on a windows host a few minutes ago.
On the ossec server, in the ossec.conf I added:

  
win-null-route
route-null.cmd
srcip
yes
  

  
win-restart-ossec
restart-ossec.cmd

  

  
win-null-route
defined-agent
012
15
60
  

I haven't looked at the route-null.cmd script to see what it does yet,
so I don't know how to check if that worked or not.
But I saw no errors in the ossec.log on the Windows agent (no tail -f
made this less than fun).

-- 

--- 
You received this message because you are subscribed to the Google Groups 
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ossec-list+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [ossec-list] How to fix ossec-execd(1312): ERROR: Error executing '/var/ossec/active-response/bin/restart-agent.cmd': Exec format error ?

2019-01-11 Thread ram sri
yes i tried reinstall agent and server also still that error will occur. 
Are you try this  
https://ossec-docs.readthedocs.io/en/latest/manual/ar/ar-windows.html in 
your side its working ??

-- 

--- 
You received this message because you are subscribed to the Google Groups 
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ossec-list+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [ossec-list] How to fix ossec-execd(1312): ERROR: Error executing '/var/ossec/active-response/bin/restart-agent.cmd': Exec format error ?

2019-01-11 Thread dan (ddp)
On Fri, Jan 11, 2019 at 9:42 AM ram sri  wrote:
>
> Thank for Reply dan (ddpbsd).
>
> Sorry for again and again post same issue .Because its big issue for me .i 
> struggle this error with two week .Please consider me and give me a solution 
> for that error
>

Did you try a reinstall of the agent?

> Thank you
>
> --
>
> ---
> You received this message because you are subscribed to the Google Groups 
> "ossec-list" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to ossec-list+unsubscr...@googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.

-- 

--- 
You received this message because you are subscribed to the Google Groups 
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ossec-list+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [ossec-list] How to fix ossec-execd(1312): ERROR: Error executing '/var/ossec/active-response/bin/restart-agent.cmd': Exec format error ?

2019-01-11 Thread ram sri
Thank for Reply dan (ddpbsd).

Sorry for again and again post same issue .Because its big issue for me .i 
struggle this error with two week .Please consider me and give me a 
solution for that error

Thank you

-- 

--- 
You received this message because you are subscribed to the Google Groups 
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ossec-list+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [ossec-list] How to fix ossec-execd(1312): ERROR: Error executing '/var/ossec/active-response/bin/restart-agent.cmd': Exec format error ?

2019-01-11 Thread dan (ddp)
Please stop spamming the list. I haven’t made time to look into your issue
yet, and if anyone else cares one of the other messages you posted will
surely draw them in.

On Fri, Jan 11, 2019 at 9:21 AM ram sri  wrote:

> Hi
>
> I am struggle with same error "ossec-execd(1312): ERROR: Error executing
> '/var/ossec/active-response/bin/restart-agent.cmd': Exec format error"
>
> I configured same as what they give
> https://ossec-docs.readthedocs.io/en/latest/manual/ar/ar-windows.html but
> it not work. Please give me a solutions for that error.
>
> 
> ---
> You received this message because you are subscribed to the Google Groups
> "ossec-list" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to ossec-list+unsubscr...@googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.
>

-- 

--- 
You received this message because you are subscribed to the Google Groups 
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ossec-list+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.