One data point: I recently upgraded both clients (Windows) and server (Ubuntu) from 2.0 to 2.3. Did a couple of clients first. No problem. Did the server next. No problem. Did more clients. Still no problem.
Sent from my Verizon Wireless BlackBerry -----Original Message----- From: Daniel Cid <[email protected]> Date: Thu, 11 Mar 2010 11:46:22 To: <[email protected]> Subject: Re: [ossec-list] lost connectivity Hey, You need to first upgrade the manager before doing that on the agents. The reverse order may work, but may not :) I wouldn't try... Rich: try upgrading one of the agents to version 2.3 to see if the problem goes away. At least we can determine if it is the known issue we fixed or not. Thanks, -- Daniel B. Cid dcid ( at ) ossec.net On Wed, Mar 10, 2010 at 5:18 PM, Dimitri <[email protected]> wrote: > Hello. > > I run OSSEC version 2.1. > > Is possible upgrade only the agent but not ossec server? > > Regards. > > Dimitri.- > http://deoxyt2.livejournal.com > http://anabalon.clan.su > OpenBSD - Free, Functional & Secure > > > > ----- Mensaje original ---- > De: Daniel Cid <[email protected]> > Para: [email protected] > Enviado: mar,9 marzo, 2010 09:31 > Asunto: Re: [ossec-list] lost connectivity > > Hey, > > What version of OSSEC are you using? If you are getting this alerts is > because the > manager didn't see any event from the agent for a while. If the agent > wasn't shut down > and starts sending events back again, the manager will not report that the > agent > has been reconnected... > > *if you are on version 2.2 on Windows, we fixed some relevant bugs > related to that ( > losing the connection and not reconnecting). > > Thanks, > > -- > Daniel B. Cid > dcid ( at ) ossec.net > > On Mon, Mar 8, 2010 at 5:30 PM, Rich Rumble <[email protected]> wrote: >> I have the same issue, no fix in sight, as I can't track down the problem >> yet. All day long my host's come and go, except for host's I've added after >> the problem began, none of them are having the issue. They connect back up >> with no alert in the log, I only receive disconnects notices, never the >> reconnect notices unless the service on the host has been restarted. >> Restarting the server does nothing, upgrading, and trying the >> upgrade/reinstall again also changed nothing. >> The logs, other than the disconnects, are accurate on the ossec server, so >> I've been ignoring the disconnections and checking the log on the server and >> not my email alerts.... >> >> On Mon, Mar 8, 2010 at 10:18 AM, Dimitri <[email protected]> wrote: >>> >>> Dears. >>> >>> I have the following problem with ossec. Constantly loses connectivity >>> between the server and clients, the server suggest me "inactive", but the >>> client tells me that its status is "active". >>> To fix this daily I restart the ossec Server services, and this generates >>> events audit must report and are not in compliance because this is a >>> problem, not an isolated incident. >>> >>> any idea which is the problem.? >>> Dimitri.- >>> http://deoxyt2.livejournal.com >>> http://anabalon.clan.su >>> OpenBSD - Free, Functional & Secure >>> >>> >>> >> >> > > > > >
