Hi Nicolas, You only get these messages if the agent is sending completely bogus messages to the server (not following the format at all). Are you running a port scan on this agent or is anything accessing the server port 1514 from there? If the communication between them is working fine, that's the only thing I can think of.
Thanks, -- Daniel B. Cid dcid ( at ) ossec.net On Nov 23, 2007 10:16 AM, Nicolas Arias <[EMAIL PROTECTED]> wrote: > > Hello Guys! > > situation: > > 1 server, 1 agent > > agent -> server communication is working ok, i see the agent events on > the server and active response is working ok. > > > now, i see "Incorrectly formated message" on the server log > > > any clue?, doesn't sound like the typical bad key situation... > > thanks! >
