[ossec-list] Re: Do OSSEC agents cache events when offline?

[Dave S]

I agree, there's enough flaky behavior to warrant some closer scrutiny
of server/agent communications.
I've been trying to obtain some information on the details of the
protocol so I can review it (see
http://groups.google.com/group/ossec-list/browse_thread/thread/3a8aee9fffd942e1/c36bde94b28b4fa2
) but not having any luck.
Any body know of any technical docs in this area?