Not sure why my previous message not appeared in list.
I want to force ossec server to listen TCP port instead of UDP. As UDP packets are frequently being lost. And lots of active-response on agents doesn't work. I've found only one option to use TCP, but it is related to syslog protocol.
