List,
I have a problem with OSSEC.
Ossec server is not receiving any warning of the 110 agents installed.
In the log just shows a lot of messages:
2009/07/24 11:57:14 ossec-remoted(1213): WARN: Message from 172.x.x.x
not allowed.
2009/07/24 11:50:32 ossec-remote (1403): BUG: Incorrectly formate
message from'172. Xxx.
2009/07/24 11:51:53 ossec-remote (1407): ERROR: Duplicated counter for 'SRV1.
I tested removing the counters in /var/ossec/queue/rids/ on both sides
but still the same.
suggestions will be appreciated
Thank you
--
Martin Tartarelli
Linux User #476492
--