Yes, yes and yes
____________________________________________
Michael Barrett | Information Security Analyst - Lead | Mortgage Guaranty Insurance Corporation
270 E. Kilbourn Ave. | Milwaukee, WI 53202 USA | ( 1.414.347.6271 | 7 1.888.601.4440 | * [email protected]
“Accomplishing the impossible means only
that your boss will add it to your regular duties” Doug Larson
This message is intended for use only by the person(s) addressed above
and may contain privileged and confidential information. Disclosure or
use of this message by any other person is strictly prohibited. If this
message is received in error, please notify the sender immediately and
delete this message.
| From: | "dan (ddp)" <[email protected]> |
| To: | [email protected] |
| Date: | 10/05/2010 11:03 AM |
| Subject: | Re: [ossec-list] Incorrectly formated message from... |
| Sent by: | [email protected] |
Is the IP address of the agent unique? Have you tried re-entering the
key on the agent? Have you tried deleting the agent in manage_agents
and re-adding it?
On Tue, Oct 5, 2010 at 11:21 AM, Michael Barrett
<[email protected]> wrote:
>
> I am continually getting this message. This is the only agent that is doing
> it.
>
> The server is 2.5 as well as the agent.
>
> On server
>
> 2010/10/05 09:50:14 ossec-remoted(1403): ERROR: Incorrectly formated message
> from 'x.x.x.x'.
>
>
>
>
> On agent
>
> 2010/10/05 09:54:45 ossec-agent: INFO: Trying to connect to server
> (144.122.190.48:1514).
>
> 2010/10/05 09:55:06 ossec-agent(4101): WARN: Waiting for server reply (not
> started). Tried: '144.122.190.48'.
>
>
> The server is on RedHat and the agent is Windows 2003 Enterprise 64 bit
>
> ____________________________________________
> Michael Barrett | Information Security Analyst - Lead | Mortgage Guaranty
> Insurance Corporation
> 270 E. Kilbourn Ave. | Milwaukee, WI 53202 USA | ( 1.414.347.6271 | 7
> 1.888.601.4440 | * [email protected]
>
> “Accomplishing the impossible means only that your boss will add it to your
> regular duties” Doug Larson
>
> This message is intended for use only by the person(s) addressed above and
> may contain privileged and confidential information. Disclosure or use of
> this message by any other person is strictly prohibited. If this message is
> received in error, please notify the sender immediately and delete this
> message.
>
