Hello! I had updated my ossec from 0.9-1a to 0.9-3. I have one server and 3
remote clients. 2 of them are working good, but only one cannot connect to
server. In logs are strings:
2006/10/26 11:26:23 ossec-agentd(1214): Problem receiving message from X.X.X.X.
2006/10/26 11:26:37 ossec-agentd(4101): Waiting for server reply (not started).
No firewall rules, which can break connection are present on both sides.
Moreover, tcpdump (on client) shows this:
listening on eth1, link-type EN10MB (Ethernet), capture size 96 bytes
11:23:06.743109 IP client.36440 > server.1514: UDP, length 73
11:23:06.744738 IP server.1514 > client.36440: UDP, length 73
Why this may happens and what can I do to restore correct work?
--
With respect
Serg.
