[ossec-list] Re: Max agents and ossec-remoted(1501): ERROR

2009-06-24 Thread HouseofSwartz
We have created a script that parses through a text file to add several hundred clients at a time. This script will find the last index number and the proceed with the next index number. #!/bin/bash ## this is the last key's index number, taken via bin/agent_control ## ## -chuck

[ossec-list] Re: Max agents and ossec-remoted(1501): ERROR

2009-06-22 Thread HouseofSwartz
Update: Figured out the remoted issue, we didn't have a allowed-ips listed in our config file. Not sure if it is required for our setup. However, now the real issue is that port 1514 isn't showing up in netstat. And even worse is this in /var/log/messages - Jun 22 10:53:05 n1pvir006 kernel:

[ossec-list] Re: Max agents and ossec-remoted(1501): ERROR

2009-06-22 Thread HouseofSwartz
Update: Recompiled cleaned up the segfault and port 1514 is back on- line. Not sure what happened to cause, but needing to move on... The current major issue is getting beyond what seems to be a hard limit of 1025 clients, even though I set the 'setmaxagents' to 4096. We are using a script to

[ossec-list] Re: Max agents and ossec-remoted(1501): ERROR

2009-06-22 Thread Daniel Cid
Hi Patrick, I replied to you privately, but will also reply here. You don't need the allowed_ips option for the agent/server communication. It is only used for syslog. As far as this issue, I believe it is being caused by a system level resource. Try doing # ulimit -a Then increasing whatever