On Tue, Oct 15, 2013 at 9:13 AM, Eli <[email protected]> wrote: > > Thanks. > That did the trick. > > What about the "Unable to start OSSEC (check config)" error? > > How do I get rid of that? >
Is this a Windows agent? Are there any hints in the ossec.log? Check the services to make sure ossec isn't running. > > > On Tuesday, 15 October 2013 16:02:14 UTC+3, Pranav Lal wrote: >> >> Hi, >> There is an error in the key that you are entering into the agent. I >> had this happen to me the first time I ran ossec (2 weeks ago). Look >> for characters like hard returns. I was lucky, that I spotted them >> correctly. >> >> Pranav >> >> On 10/15/13, Eli <[email protected]> wrote: >> > ossec.log says: >> > ERROR: Incorrectly formatted message from '4.4.4.3' (my agent ip) >> > Guess I should have looked here earlier. >> > >> > How do I fix this? >> > >> > Thanks >> > >> > >> > On Tuesday, 15 October 2013 13:27:02 UTC+3, Pranav Lal wrote: >> >> >> >> Hi Eli, >> >> >> >> What do the logs on the agent and those on the server show? >> >> >> >> Pranav >> >> >> >> On 10/15/13, Eli <[email protected] <javascript:>> wrote: >> >> > I have installed ossec server on linux mint & client on win7. >> >> > After adding client and extracting key I started the windows client. >> >> > The client is now transmitting tto udp port 1514, however for some >> >> reason >> >> > the server is not replying. >> >> > >> >> > The network connection is OK and pinging between machines works + >> >> > I've >> >> > disabled fw on both machines. >> >> > >> >> > Can anyone please help me establish connection? >> >> > >> >> > Thanks, >> >> > >> >> > Eli >> >> > >> >> > -- >> >> > >> >> > --- >> >> > You received this message because you are subscribed to the Google >> >> Groups >> >> > "ossec-list" group. >> >> > To unsubscribe from this group and stop receiving emails from it, >> >> > send >> >> an >> >> > email to [email protected] <javascript:>. >> >> > For more options, visit https://groups.google.com/groups/opt_out. >> >> > >> >> >> > >> > -- >> > >> > --- >> > You received this message because you are subscribed to the Google >> > Groups >> > "ossec-list" group. >> > To unsubscribe from this group and stop receiving emails from it, send >> > an >> > email to [email protected]. >> > For more options, visit https://groups.google.com/groups/opt_out. >> > > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/groups/opt_out. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
