Hi Michael, Did you re-use the agent id (or name)? The last message the server received from this agent was 116-2965 (msg id 1,152,850), but the agent is trying to send the message 102-5269 (msg id 1,025,167), which is more than 100,000 messages old... Try removing the agent from the server and re-issuing a new agent id. Re import the keys into the server and see if it works now.
*To calculate the msg id, do: (global_id -1) * 9999 + local_id. Hope it helps. -- Daniel B. Cid dcid ( at ) ossec.net On 5/30/07, Michael Starks <[EMAIL PROTECTED]> wrote: > > Daniel Cid wrote: > > Hi Michael, > > > > Can you show us what is in the server log file? Was the agent able to > > connect > > to the server after or it is still unavailable? What architecture you > > are running > > OpenBSD 3.8? If it is i386 it would not be an endiness issue... > > There are some strange entries in the server ossec.log. When I restart > the agent, this shows up: > > 2007/05/30 20:44:25 ossec-remoted: Duplicate error: global: 102, local: > 5269, saved global: 116, saved local:2965 > 2007/05/30 20:44:25 ossec-remoted(1407): Duplicated counter for 'pI? ?? > > ????'. >
