[ossec-list] Unable to connect to active response queue

[John Horne]

Hello,

Newbie to OSSEC (2.2), and I have done a 'local' install to see how it
works. I have configured a simple active-response command, but when I
tell ossec to start a syscheck/rootkitcheck run I get the following
error:

   # ./agent_control -r -a
   2009/11/27 14:16:15 agent_control(1210): ERROR: Queue 
     '/queue/alerts/ar' not accessible: 'Queue not found'.
   2009/11/27 14:16:30 agent_control(1301): ERROR: Unable to connect to
     active response queue.

   ** Unable to connect to remoted.

This is a 'local' install though, so surely 'remoted' doesn't need to
run?

Any ideas suggestions about this?



Thanks,

John.

-- 
John Horne                   Tel: +44 (0)1752 587287
University of Plymouth, UK   Fax: +44 (0)1752 587001