Hi, There is an error in the key that you are entering into the agent. I had this happen to me the first time I ran ossec (2 weeks ago). Look for characters like hard returns. I was lucky, that I spotted them correctly.
Pranav On 10/15/13, Eli <[email protected]> wrote: > ossec.log says: > ERROR: Incorrectly formatted message from '4.4.4.3' (my agent ip) > Guess I should have looked here earlier. > > How do I fix this? > > Thanks > > > On Tuesday, 15 October 2013 13:27:02 UTC+3, Pranav Lal wrote: >> >> Hi Eli, >> >> What do the logs on the agent and those on the server show? >> >> Pranav >> >> On 10/15/13, Eli <[email protected] <javascript:>> wrote: >> > I have installed ossec server on linux mint & client on win7. >> > After adding client and extracting key I started the windows client. >> > The client is now transmitting tto udp port 1514, however for some >> reason >> > the server is not replying. >> > >> > The network connection is OK and pinging between machines works + I've >> > disabled fw on both machines. >> > >> > Can anyone please help me establish connection? >> > >> > Thanks, >> > >> > Eli >> > >> > -- >> > >> > --- >> > You received this message because you are subscribed to the Google >> Groups >> > "ossec-list" group. >> > To unsubscribe from this group and stop receiving emails from it, send >> an >> > email to [email protected] <javascript:>. >> > For more options, visit https://groups.google.com/groups/opt_out. >> > >> > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/groups/opt_out. > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
