On Mon, Jan 28, 2013 at 3:54 PM, C. L. Martinez <[email protected]> wrote: > Ok, I am using the following config in OSSEC server: > > <remote> > <connection>secure</connection> > <local_ip>10.55.10.1</local_ip> > <port>47555</port> > </remote> > > (This server has multiple IP's) ... and from agent side, I see this: > > 2013/01/28 15:50:08 ossec-agentd(4101): WARN: Waiting for server reply > (not started). Tried: 'ossecsrv.domain.com/10.55.10.1'. > 2013/01/28 15:50:10 ossec-agentd: INFO: Trying to connect to server > (ossecsrv.domain.com/10.55.10.1:47555). > 2013/01/28 15:50:10 ossec-agentd: INFO: Using IPv4 for: 10.55.10.1 . > > There is no firewall enabled on both sides and no firewalls are in the > middle ... bot hosts are on the same network. > > >
Ok, problem solved. Problem was on ossec server side due to this kernel param: net.core.rmem_max = 33554432 Setting this to default, all works ok now. Thanks for your help. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
