Run remoted in debug mode (kill it and run it with the -d flag) on the server. Run agentd in debug mode (same as above) on the agent.
On Fri, Sep 17, 2010 at 1:28 AM, bcube <[email protected]> wrote: > They would all reconnect by themselves and stay connected for a few > hours then disconnect again. It's been like this for the past week. > > I've set the debug to level 2 on windows, syscheck, remoted etc.. on > the internal_options.conf but still cant see anything wrong. > > On Sep 17, 11:51 am, bcube <[email protected]> wrote: >> Hi Dan, >> >> -Version of server is 2.4 >> -Version for agents are mixed from 2.0 to 2.4 >> -Everything is working fine until Sep 9, 2010 >> >> I've checked on the logs but cant seem to find any possible indication >> as to what happened >> >> On Sep 17, 10:16 am, "[email protected]" <[email protected]> wrote: >> >> > What version of ossec? Did they ever work? Is there anything in the server >> > and agent ossec.log file that might provide a clue? >> >> > dan >> >> > -----Original Message----- >> > From: bcube >> > Sent: 09/16/2010 9:38:10 PM >> > Subject: [ossec-list] ossec agents disconnecting >> >> > We are experiencing the same issues as the thread below for 1 week >> > now. We have over 100+ agents mixed windows and linux. Will test the >> > recommendations below. >> >> > so far I set remoted.verify_msg_id=0 but still no effect. >> > Will try clearing the rids. >> >> >http://groups.google.com/group/ossec-list/browse_thread/thread/949c1b...
