Is the IP address of the agent unique? Have you tried re-entering the key on the agent? Have you tried deleting the agent in manage_agents and re-adding it?
On Tue, Oct 5, 2010 at 11:21 AM, Michael Barrett <[email protected]> wrote: > > I am continually getting this message. This is the only agent that is doing > it. > > The server is 2.5 as well as the agent. > > On server > > 2010/10/05 09:50:14 ossec-remoted(1403): ERROR: Incorrectly formated message > from 'x.x.x.x'. > > > > > On agent > > 2010/10/05 09:54:45 ossec-agent: INFO: Trying to connect to server > (144.122.190.48:1514). > > 2010/10/05 09:55:06 ossec-agent(4101): WARN: Waiting for server reply (not > started). Tried: '144.122.190.48'. > > > The server is on RedHat and the agent is Windows 2003 Enterprise 64 bit > > ____________________________________________ > Michael Barrett | Information Security Analyst - Lead | Mortgage Guaranty > Insurance Corporation > 270 E. Kilbourn Ave. | Milwaukee, WI 53202 USA | ( 1.414.347.6271 | 7 > 1.888.601.4440 | * [email protected] > > “Accomplishing the impossible means only that your boss will add it to your > regular duties” Doug Larson > > This message is intended for use only by the person(s) addressed above and > may contain privileged and confidential information. Disclosure or use of > this message by any other person is strictly prohibited. If this message is > received in error, please notify the sender immediately and delete this > message. >
