Do you have a command named win_nullroute600? Please show us your config. Also make sure AR is enabled on the Windows agent.
On Sun, Feb 6, 2011 at 2:32 AM, tayebe <[email protected]> wrote: > hello daniel. > I install ossec_hids 2.4.1 on a fedora core 13 as server,and on a > windows xp and a fc13 as agents.but unfortunatelly my windows agent > can't create ar.conf and merged.mg ,but my linux agent works > properly.when i use /var/ossec/bin/agent_control -b 1.2.1.2 -f > win_nullroute600 -u 017 for test ,i recieve error maessage in windows > agent logs: > ERROR: Unable to open file 'shared/ar.conf'. > > ossec-execd(1311): ERROR: Invalid command name 'win_nullroute600' > provided. > > i checked firewall in both server and agent also. > i do'nt know what to do.plz help me. > thx before.
