Hello, How does this log file look, I'm getting the No Agent Available.
I do not have any firewall configured on the windows side. 2010/08/03 16:29:55 ossec-agent(1410): Reading authentication keys file. 2010/08/03 16:29:55 ossec-agent: Connecting to server (192.168.88.129:1514). 2010/08/03 16:29:55 ossec-agent: Starting syscheckd thread. 2010/08/03 16:29:55 ossec-rootcheck: Started (pid: 1852). 2010/08/03 16:29:55 ossec-agent: Monitoring registry entry: 'HKEY_LOCAL_MACHINE\Software\Policies'. 2010/08/03 16:29:55 ossec-agent: Monitoring registry entry: 'HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion'. 2010/08/03 16:29:55 ossec-agent: Monitoring registry entry: 'HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion'. 2010/08/03 16:29:55 ossec-agent: Monitoring registry entry: 'HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer'. 2010/08/03 16:29:55 ossec-agent: Monitoring registry entry: 'HKEY_LOCAL_MACHINE\Software\Classes'. 2010/08/03 16:29:55 ossec-agent: Monitoring registry entry: 'HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control'. 2010/08/03 16:29:55 ossec-agent: Monitoring registry entry: 'HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services'. 2010/08/03 16:29:55 ossec-agent: Monitoring registry entry: 'HKEY_LOCAL_MACHINE\Security'. 2010/08/03 16:29:55 ossec-agent: Monitoring directory: 'C:\WINDOWS/system32'. 2010/08/03 16:29:55 ossec-agent: Started (pid: 1852). 2010/08/03 16:30:10 ossec-agent(4101): Waiting for server reply (not started). 2010/08/03 16:30:26 ossec-agent(4101): Waiting for server reply (not started). 2010/08/03 16:30:57 ossec-agent(4101): Waiting for server reply (not started). 2010/08/03 16:31:43 ossec-agent(4101): Waiting for server reply (not started). 2010/08/03 16:32:44 ossec-agent(4101): Waiting for server reply (not started). 2010/08/03 16:34:00 ossec-agent(4101): Waiting for server reply (not started). 2010/08/03 16:34:04 ossec-agent: Server unavailable. Setting lock. 2010/08/03 16:35:31 ossec-agent(4101): Waiting for server reply (not started). 2010/08/03 16:37:17 ossec-agent(4101): Waiting for server reply (not started). 2010/08/03 16:39:18 ossec-agent(4101): Waiting for server reply (not started). 2010/08/03 16:41:34 ossec-agent(4101): Waiting for server reply (not started). 2010/08/03 16:44:05 ossec-agent(4101): Waiting for server reply (not started). 2010/08/03 16:46:51 ossec-agent(4101): Waiting for server reply (not started). 2010/08/03 16:50:47 ossec-agent(1410): Reading authentication keys file. 2010/08/03 16:50:47 ossec-agent: No previous counter available for 'Tester01'. 2010/08/03 16:50:47 ossec-agent: Assigning counter for agent Tester01: '0:0'. 2010/08/03 16:50:47 ossec-agent: Assigning sender counter: 0:69 2010/08/03 16:50:47 ossec-agent: Connecting to server (192.168.88.129:1514). 2010/08/03 16:50:47 ossec-agent: Starting syscheckd thread. 2010/08/03 16:50:47 ossec-rootcheck: Started (pid: 476). 2010/08/03 16:50:47 ossec-agent: Monitoring registry entry: 'HKEY_LOCAL_MACHINE\Software\Policies'. 2010/08/03 16:50:47 ossec-agent: Monitoring registry entry: 'HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion'. 2010/08/03 16:50:47 ossec-agent: Monitoring registry entry: 'HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion'. 2010/08/03 16:50:47 ossec-agent: Monitoring registry entry: 'HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer'. 2010/08/03 16:50:47 ossec-agent: Monitoring registry entry: 'HKEY_LOCAL_MACHINE\Software\Classes'. 2010/08/03 16:50:47 ossec-agent: Monitoring registry entry: 'HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control'. 2010/08/03 16:50:47 ossec-agent: Monitoring registry entry: 'HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services'. 2010/08/03 16:50:47 ossec-agent: Monitoring registry entry: 'HKEY_LOCAL_MACHINE\Security'. 2010/08/03 16:50:47 ossec-agent: Monitoring directory: 'C:\WINDOWS/system32'. 2010/08/03 16:50:47 ossec-agent: Started (pid: 476). 2010/08/03 16:51:02 ossec-agent(4101): Waiting for server reply (not started). 2010/08/03 16:51:18 ossec-agent(4101): Waiting for server reply (not started). 2010/08/03 16:51:49 ossec-agent(4101): Waiting for server reply (not started). 2010/08/03 16:52:35 ossec-agent(4101): Waiting for server reply (not started). 2010/08/03 16:53:36 ossec-agent(4101): Waiting for server reply (not started). 2010/08/03 16:54:37 ossec-agent(1218): Unable to send message to server. 2010/08/03 16:54:43 ossec-agent(1218): Unable to send message to server. 2010/08/03 16:54:52 ossec-agent(4101): Waiting for server reply (not started). 2010/08/03 16:54:56 Remote socket busy, waiting 1 s. 2010/08/03 16:54:57 Remote socket busy, waiting 2 s. 2010/08/03 16:54:59 Remote socket busy, waiting 3 s. 2010/08/03 16:55:02 Remote socket busy, waiting 4 s. 2010/08/03 16:55:06 Remote socket busy, waiting 5 s. 2010/08/03 16:55:11 ossec-agent(1218): Unable to send message to server. 2010/08/03 16:55:11 ossec-agent: Server unavailable. Setting lock. 2010/08/03 16:55:11 Remote socket busy, waiting 1 s. 2010/08/03 16:55:12 Remote socket busy, waiting 2 s. 2010/08/03 16:55:14 Remote socket busy, waiting 3 s. 2010/08/03 16:55:17 Remote socket busy, waiting 4 s. 2010/08/03 16:55:21 Remote socket busy, waiting 5 s. 2010/08/03 16:55:26 ossec-agent(1218): Unable to send message to server. 2010/08/03 16:55:27 Remote socket busy, waiting 1 s. 2010/08/03 16:55:28 Remote socket busy, waiting 2 s. 2010/08/03 16:55:30 Remote socket busy, waiting 3 s. 2010/08/03 16:55:33 Remote socket busy, waiting 4 s. 2010/08/03 16:55:37 Remote socket busy, waiting 5 s. 2010/08/03 16:55:42 ossec-agent(1218): Unable to send message to server. 2010/08/03 16:55:44 Remote socket busy, waiting 1 s. 2010/08/03 16:55:45 Remote socket busy, waiting 2 s. 2010/08/03 16:55:47 Remote socket busy, waiting 3 s. 2010/08/03 16:55:50 Remote socket busy, waiting 4 s. 2010/08/03 16:55:54 Remote socket busy, waiting 5 s. 2010/08/03 16:55:59 ossec-agent(1218): Unable to send message to server. 2010/08/03 16:56:02 Remote socket busy, waiting 1 s. 2010/08/03 16:56:23 ossec-agent(4101): Waiting for server reply (not started). 2010/08/03 16:58:09 ossec-agent(4101): Waiting for server reply (not started). 2010/08/03 17:00:10 ossec-agent(4101): Waiting for server reply (not started). 2010/08/03 17:02:26 ossec-agent(4101): Waiting for server reply (not started). 2010/08/03 17:04:57 ossec-agent(4101): Waiting for server reply (not started). 2010/08/03 17:07:43 ossec-agent(4101): Waiting for server reply (not started). 2010/08/03 17:08:47 ossec-agent: Received exit signal. 2010/08/03 17:08:47 ossec-agent: Exiting... 2010/08/03 17:08:53 ossec-agent(1410): Reading authentication keys file. 2010/08/03 17:08:53 ossec-agent: No previous counter available for 'Tester01'. 2010/08/03 17:08:53 ossec-agent: Assigning counter for agent Tester01: '0:0'. 2010/08/03 17:08:53 ossec-agent: Assigning sender counter: 0:133 2010/08/03 17:08:53 ossec-agent: Connecting to server (192.168.88.129:1514). 2010/08/03 17:08:53 ossec-agent: Starting syscheckd thread. 2010/08/03 17:08:53 ossec-rootcheck: Started (pid: 2404). 2010/08/03 17:08:53 ossec-agent: Monitoring registry entry: 'HKEY_LOCAL_MACHINE\Software\Policies'. 2010/08/03 17:08:53 ossec-agent: Monitoring registry entry: 'HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion'. 2010/08/03 17:08:53 ossec-agent: Monitoring registry entry: 'HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion'. 2010/08/03 17:08:53 ossec-agent: Monitoring registry entry: 'HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer'. 2010/08/03 17:08:53 ossec-agent: Monitoring registry entry: 'HKEY_LOCAL_MACHINE\Software\Classes'. 2010/08/03 17:08:53 ossec-agent: Monitoring registry entry: 'HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control'. 2010/08/03 17:08:53 ossec-agent: Monitoring registry entry: 'HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services'. 2010/08/03 17:08:53 ossec-agent: Monitoring registry entry: 'HKEY_LOCAL_MACHINE\Security'. 2010/08/03 17:08:53 ossec-agent: Monitoring directory: 'C:\WINDOWS/system32'. 2010/08/03 17:08:53 ossec-agent: Started (pid: 2404). 2010/08/03 17:09:08 ossec-agent(4101): Waiting for server reply (not started). 2010/08/03 17:09:24 ossec-agent(4101): Waiting for server reply (not started). 2010/08/03 17:09:55 ossec-agent(4101): Waiting for server reply (not started). 2010/08/03 17:10:41 ossec-agent(4101): Waiting for server reply (not started).
