Ok, I am using the following config in OSSEC server:
<remote>
<connection>secure</connection>
<local_ip>10.55.10.1</local_ip>
<port>47555</port>
</remote>
(This server has multiple IP's) ... and from agent side, I see this:
2013/01/28 15:50:08 ossec-agentd(4101): WARN: Waiting for server reply
(not started). Tried: 'ossecsrv.domain.com/10.55.10.1'.
2013/01/28 15:50:10 ossec-agentd: INFO: Trying to connect to server
(ossecsrv.domain.com/10.55.10.1:47555).
2013/01/28 15:50:10 ossec-agentd: INFO: Using IPv4 for: 10.55.10.1 .
There is no firewall enabled on both sides and no firewalls are in the
middle ... bot hosts are on the same network.
On Mon, Jan 28, 2013 at 2:43 PM, C. L. Martinez <[email protected]> wrote:
> On Mon, Jan 28, 2013 at 1:34 PM, dan (ddp) <[email protected]> wrote:
>> On Mon, Jan 28, 2013 at 6:04 AM, C. L. Martinez <[email protected]> wrote:
>>> On Fri, Jan 25, 2013 at 2:10 PM, dan (ddp) <[email protected]> wrote:
>>>>>
>>>>>
>>>>
>>>> I'm not seeing this with any of my systems. What syslog daemon are you
>>>> using? If you turn on logall, do you see the "missing" messages in
>>>> archives.log? I don't know what facilities there are on FreeBSD for
>>>> debugging things like this. Any chance there's an strace or ktrace you
>>>> can do and see if you spot an issue?
>>>>
>
> No, there is no "missing" error appears on the server side ... But, I
> have found the problem, I think ... When you setup several agents via
> hostname, OSSEC resolvs them via DNS or it can use /etc/hosts file???
--
---
You received this message because you are subscribed to the Google Groups
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.
