On May 15, 2013 7:30 AM, "Kyle Vorster" <[email protected]> wrote: > > Hey there, > > I'm having issues getting a agent connected to the server, I've followed all the docs in resolving this issue but just cant get it to work. Error I get > > 2013/05/15 12:43:50 ossec-logcollector: INFO: Monitoring full output of command(360): netstat -tan |grep LISTEN |grep -v 127.0.0.1 | sort > 2013/05/15 12:43:50 ossec-logcollector: INFO: Monitoring full output of command(360): last -n 5 > 2013/05/15 12:43:50 ossec-logcollector: INFO: Started (pid: 20948). > 2013/05/15 12:43:52 ossec-logcollector: WARN: Process locked. Waiting for permission... > 2013/05/15 12:44:05 ossec-agentd(4101): WARN: Waiting for server reply (not started). Tried: 'server-ip'. > 2013/05/15 12:44:07 ossec-agentd: INFO: Trying to connect to server (server-ip:1514). > 2013/05/15 12:44:07 ossec-agentd: INFO: Using IPv4 for: server-ip . > 2013/05/15 12:44:28 ossec-agentd(4101): WARN: Waiting for server reply (not started). Tried: 'server-ip'. > > Followed the advice at http://www.ossec.net/doc/faq/unexpected.html#how-do-i-troubleshoot-ossecbut still no luck, anyone have an idea of what I can do to troubleshoot or resolve this issue. >
I probably missed it in your message, but are there any relevant log messages on the server? Is the ip address of the agent in client.keys unique? Is it the correct ip (the one that the server sees)? Is the traffic from the agent making it to the server? Is the response traffic reaching the agent? > - Kyle > > -- > > --- > You received this message because you are subscribed to the Google Groups "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. > For more options, visit https://groups.google.com/groups/opt_out. > > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
