Hi Jon, Generally this is a problem with the keys. Take a look at the following pages in our FAQ:
http://www.ossec.net/wiki/index.php/Errors:AgentCommunication http://www.ossec.net/wiki/index.php/Errors:1403 If that doesn't help, try giving us the following info: http://www.ossec.net/wiki/index.php/Community_manual:BugReport *the logs from one of those agents and the server should be enough. Thanks, -- Daniel B. Cid dcid ( at ) ossec.net On 9/28/07, Jon Whittington <[EMAIL PROTECTED]> wrote: > > > > > Hello, > > > > I am getting the following error logged on the "ossec server: > ossec-remoted(1403): Incorrectly formated message from 'IP ADDRESS'" > > > > I read a couple of other posts on this and followed the suggestions there > (confirmed the correct key, confirmed the IP address in the client.key > file). > > > > The message is caused by 2 Windows 2003 R2 x64 servers – I have another 2 > identical servers working fine. > > > > Is there any information I can provide to aid in troubleshooting? > > > > Cheers, > > > > Jon > > > > > > > No virus found in this outgoing message. > Checked by AVG Free Edition. > Version: 7.5.488 / Virus Database: 269.13.33/1034 - Release Date: 9/27/2007 > 5:00 PM >
