ACK! Sorry, I added 4101 on server.
2012/06/26 16:38:17 ossec-agentd: INFO: Trying to connect to server (192.168.x.x:1514). 2012/06/26 16:38:17 ossec-agentd: INFO: Using IPv4 for: 192.168.x.x . 2012/06/26 16:38:18 ossec-agentd(4102): INFO: Connected to the server (192.168.x.x:1514). 2012/06/26 16:39:23 ossec-syscheckd: INFO: Starting syscheck scan (forwarding database). 2012/06/26 16:39:23 ossec-syscheckd: INFO: Starting syscheck database (pre-scan). Thanks for the help, and sorry for the noise. On Tuesday, 26 June 2012 16:34:04 UTC+1, Thomas Bartos wrote: > > Tom can you confirm UDP protocol for port 1514 on the UFW? > cheers > -thomas > > Thomas Bartos > System Administrator | BoardVantage | p650.614.6041 > > > > > On Jun 26, 2012, at 8:02 AM, Tom Barrett wrote: > > I've installed ossec server + 2 agents. Simple installation with > install.sh. > Server is working, detecting root login attempts within minutes, and > emailing me about it. > > I have allowed port 1514 on ufw, but neither agent is reporting anything, > nor seem to working? > > 2012/06/26 15:58:36 ossec-agentd(4101): WARN: Waiting for server reply > (not started). Tried: '192.168.x.x'. > 2012/06/26 16:00:08 ossec-agentd: INFO: Trying to connect to server > (192.168.x.x:1514). > 2012/06/26 16:00:08 ossec-agentd: INFO: Using IPv4 for: 192.168.x.x . > 2012/06/26 16:00:29 ossec-agentd(4101): WARN: Waiting for server reply > (not started). Tried: '192.168.x.x'. > > What am I getting wrong? > > >
