Hi Peter, What is the version of these agents? This issue was fixed a while ago... However, it shouldn't affect how OSSEC works, just some noise in the logs.
Btw, how many files do you have inside the shared directory for that agent? And what is the output of agent_control -i for them? Thanks, -- Daniel B. Cid dcid ( at ) ossec.net On Mon, Dec 7, 2009 at 3:24 PM, Peter M. Abraham <[email protected]> wrote: > Greetings: > > After upgrading the ossec server, and all agents I'm still seeing the > following in /var/ossec/logs/ossec.log on the server end: > > 2009/12/07 13:55:51 ossec-remoted: Invalid message from > 'abc.def.hij.klm' (strchr \n) > 2009/12/07 14:04:14 ossec-remoted: Invalid message from > 'abc.def.hij.klm' (strchr \n) > 2009/12/07 14:04:14 ossec-remoted: Invalid message from > 'abc.def.hij.klm' (strchr \n) > 2009/12/07 14:04:14 ossec-remoted: Invalid message from > 'abc.def.hij.klm' (strchr \n) > 2009/12/07 14:04:14 ossec-remoted: Invalid message from > 'abc.def.hij.klm' (strchr \n) > > Where the IP's are from our Window servers. > > Thoughts? > > Thank you. >
