|
I have newest version of OSSIM setup and
also installed the version 2.0 of OSSEC. I have a hand-full of PC
& Solaris servers that have the OSSEC agent running on them. The
OSSEC server is running on my OSSIM box.
The setup all went fine. I was able to generate, export, and import the keys fine too. I setup ossec-wui and everything looks good there as well. However, in the OSSEC server logs, I see a BUNCH of these error messages correlating to all of the agent machines: ossec-remoted: Invalid message from 'a.b.c.d' (strchr \n) (where a.b.c.d is the IP address of the agent). Has anyone else seen this? Any ideas on how to fix it or what I'm missing? Thanks! |
