[ossec-list] Re: v5.1.1: WARN msg not allowed, Incorrectly formated, and Duplicate counters?

2009-08-05 Thread Daniel Cid
all agents are completed, I restart the server. Should this be done differently? //Clint - Original Message - From: Daniel Cid daniel@gmail.com To: ossec-list@googlegroups.com Sent: Thursday, July 30, 2009 4:24 PM Subject: [ossec-list] Re: v5.1.1: WARN msg not allowed

[ossec-list] Re: v5.1.1: WARN msg not allowed, Incorrectly formated, and Duplicate counters?

2009-08-05 Thread Clint Alexander
2:32 PM Subject: [ossec-list] Re: v5.1.1: WARN msg not allowed, Incorrectly formated, and Duplicate counters? Hi Clint, That's so strange... The database output is a separated process and not related to the manager/agents communication. Maybe your agents are getting blocked via active

[ossec-list] Re: v5.1.1: WARN msg not allowed, Incorrectly formated, and Duplicate counters?

2009-08-03 Thread Clint Alexander
- Original Message - From: Daniel Cid daniel@gmail.com To: ossec-list@googlegroups.com Sent: Thursday, July 30, 2009 4:24 PM Subject: [ossec-list] Re: v5.1.1: WARN msg not allowed, Incorrectly formated, and Duplicate counters? Hi Clint, These errors are related to one key being

[ossec-list] Re: v5.1.1: WARN msg not allowed, Incorrectly formated, and Duplicate counters?

2009-07-30 Thread Daniel Cid
Hi Clint, These errors are related to one key being assigned to more than one agent. When you do it, you will have this duplicated counters, errors uncompressing (since it wasn't able to decrypt properly), etc. I would suggest stopping ossec and re-creating the keys. One by one, you go adding