Howdy. CentOS x86_64 here, running a source build of 1.5.1
I have the agent configured correctly on the remote box, but I can't for
the life of me get the server to listen correctly on port 1514. The
default <remote> section of ossec.conf had the "secure" directive, and
after my tweaking now looks like:
<remote>
<connection>secure</connection>
<port>1514</port>
<local_ip>10.x.x.x</local_ip>
<allowed-ips>10.0.0.0/8</allowed-ips>
</remote>
netstat -an doesn't show anything listening on 1514 after a service
restart; though tcpdump shows packets arriving on that port from the
agent I've got set up.
Any advice anyone has would be appreciated; a preliminary search of the
archives didn't turn up anything.
--
Jay Chandler / KB1JWQ
Living Legend / Systems Exorcist
Today's Excuse: telnet: Unable to connect to remote host: Connection refused
