I'm having some communication issues with an OpenBSD 3.8 / OSSEC 1.2 agent and a Fedora / OSSEC 1.2 Server. The log on the agent has this:
2007/05/27 22:07:18 ossec-syscheckd: Started (pid: 10911). 2007/05/27 22:07:22 ossec-logcollector(1950): Analyzing file: '/var/log/messages'. 2007/05/27 22:07:22 ossec-logcollector(1950): Analyzing file: '/var/log/authlog'. 2007/05/27 22:07:22 ossec-logcollector(1950): Analyzing file: '/var/log/secure'. 2007/05/27 22:07:22 ossec-logcollector(1950): Analyzing file: '/var/log/xferlog'. 2007/05/27 22:07:22 ossec-logcollector(1950): Analyzing file: '/var/log/maillog'. 2007/05/27 22:07:22 ossec-logcollector(1950): Analyzing file: '/var/www/logs/access_log'. 2007/05/27 22:07:22 ossec-logcollector(1950): Analyzing file: '/var/www/logs/error_log'. 2007/05/27 22:07:22 ossec-logcollector: Started (pid: 7722). 2007/05/27 22:07:44 ossec-logcollector: Process locked. Waiting for permission... I thought maybe this could be a big endian issue such as described here: http://www.ossec.net/ossec-list/2007-April/msg00012.html Any thoughts? Thanks in advance.