Hi,
Sometimes ossec server says *"ERROR: Duplicated counter for"* errors.
Especially we have mass log, and log sending protocol is UDP, so rids
counter' agent and server sometimes inconsistent;
When i see this error, I see the agent is inactive. After this; agent wont
send any logs.
How
All,
Could someone please give me a clear description of what these errors
actually mean?
There are various posts on this issue, but no clear and concise
description of why they are caused and how to rectify them.
There are various posts talking about deleting and recreating agents
and keys,
On Thu, Aug 25, 2011 at 5:15 AM, PJG slt...@hotmail.co.uk wrote:
All,
Could someone please give me a clear description of what these errors
actually mean?
In an attempt to stop replay attacks a counter is used. It's
incremented every time a message is sent. If one side uses an old
counter
