On Wed, Jul 31, 2013 at 7:35 AM, Macaulay Dias Souza <[email protected]> wrote: > ID: 001, Name: MAIL, IP: 172.16.1.8, Active > ID: 002, Name: CMA02, IP: 172.16.1.226, Disconnected > > I recently installed the CMA02, worked for about 2 days and stopped working, > restart does not help him. The ip in it is exactly the same as is in the > other and all are part of the same network. Can anyone help me? Here is his > log: >
The IP in what is exactly the same as the IP in what other thing? > >> >> 2013/07/31 08:39:07 ossec-syscheckd: INFO: Started (pid: 19673). >> 2013/07/31 08:39:07 ossec-rootcheck: INFO: Started (pid: 19673). >> 2013/07/31 08:39:07 ossec-syscheckd: INFO: Monitoring directory: '/etc'. >> 2013/07/31 08:39:07 ossec-syscheckd: INFO: Monitoring directory: >> '/usr/bin'. >> 2013/07/31 08:39:07 ossec-syscheckd: INFO: Monitoring directory: >> '/usr/sbin'. >> 2013/07/31 08:39:07 ossec-syscheckd: INFO: Monitoring directory: '/bin'. >> 2013/07/31 08:39:07 ossec-syscheckd: INFO: Monitoring directory: '/sbin'. >> 2013/07/31 08:39:09 ossec-logcollector(1950): INFO: Analyzing file: >> '/var/log/messages'. >> 2013/07/31 08:39:09 ossec-logcollector(1950): INFO: Analyzing file: >> '/var/log/auth.log'. >> 2013/07/31 08:39:09 ossec-logcollector(1950): INFO: Analyzing file: >> '/var/log/syslog'. >> 2013/07/31 08:39:09 ossec-logcollector(1950): INFO: Analyzing file: >> '/var/log/mail.info'. >> 2013/07/31 08:39:09 ossec-logcollector(1950): INFO: Analyzing file: >> '/var/log/dpkg.log'. >> 2013/07/31 08:39:09 ossec-logcollector(1950): INFO: Analyzing file: >> '/var/log/proftpd/proftpd.log'. >> 2013/07/31 08:39:09 ossec-logcollector: INFO: Started (pid: 19669). >> 2013/07/31 08:39:19 ossec-logcollector: WARN: Process locked. Waiting for >> permission... >> 2013/07/31 08:39:24 ossec-agentd(4101): WARN: Waiting for server reply >> (not started). Tried: '172.16.1.18'. >> 2013/07/31 08:39:26 ossec-agentd: INFO: Trying to connect to server >> (172.16.1.18:1514). >> 2013/07/31 08:39:26 ossec-agentd: INFO: Using IPv4 for: 172.16.1.18 . >> 2013/07/31 08:39:47 ossec-agentd(4101): WARN: Waiting for server reply >> (not started). Tried: '172.16.1.18'. > Do you have logs from the server's ossec.log? That might be important. > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/groups/opt_out. > > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
