Hey, Did you run the manage_agents tool to add an agent to your server? If none is added, the ossec-remoted process will just exit. Also, take a look at /var/ossec/logs/ossec.log for any errors from ossec-remoted.
*btw, you don't need to set the local_ip or allowed_ips in your remote config. These are optional only.. Thanks, -- Daniel B. Cid dcid ( at ) ossec.net On Fri, Aug 22, 2008 at 8:51 PM, Jay Chandler <[EMAIL PROTECTED]> wrote: > > Howdy. CentOS x86_64 here, running a source build of 1.5.1 > > I have the agent configured correctly on the remote box, but I can't for > the life of me get the server to listen correctly on port 1514. The > default <remote> section of ossec.conf had the "secure" directive, and > after my tweaking now looks like: > > <remote> > <connection>secure</connection> > <port>1514</port> > <local_ip>10.x.x.x</local_ip> > <allowed-ips>10.0.0.0/8</allowed-ips> > </remote> > > netstat -an doesn't show anything listening on 1514 after a service > restart; though tcpdump shows packets arriving on that port from the > agent I've got set up. > > Any advice anyone has would be appreciated; a preliminary search of the > archives didn't turn up anything. > > -- > Jay Chandler / KB1JWQ > Living Legend / Systems Exorcist > Today's Excuse: telnet: Unable to connect to remote host: Connection refused > >
