Hi Matt, It is supposed to give you more information about the error, like we show in the manual[1]. However, the test failed message is generally related to missing the expect libraries. Did you install them? If you are using a debian-like system, just a "apt-get install expect" should solve.
If that's not the issue, let us know and we can help running them manually to debug... [1] - http://www.ossec.net/main/manual/manual-agentless-monitoring/ *btw, if you get them working, please share with us the switch brand and the config you used. I would like to create a database with all devices that we know works well. Thanks, -- Daniel B. Cid dcid ( at ) ossec.net On Thu, Mar 5, 2009 at 11:38 AM, Matt <[email protected]> wrote: > > Hello All, > > I am starting to work with the agentless monitoring, and the first > host I'm working with is a non-Cisco switch. I've modifed ossec.conf > like so: > > <agentless> > <type>ssh_generic_diff</type> > <frequency>120</frequency> <!-- set to 120, just for testing > --> > <host>[email protected]</host> > <state>periodic_diff</state> > <arguments>show config</arguments> > </agentless> > > Restarting ossec, and the following relevant log entries appear: > > 2009/03/04 08:29:27 ossec-agentlessd: INFO: Started (pid: 7151). > ... snip ... > 2009/03/04 08:29:29 ossec-agentlessd: ERROR: Test failed for > 'ssh_generic_diff' (126). Ignoring. > > Any way to debug this further, or make the logging more verbose? TIA >
