On Fri, Feb 21, 2014 at 2:24 PM, marco cohen <[email protected]> wrote: > hi, > > i get errors in the logs of the agent (Centos): > > 2014/02/21 14:16:29 ossec-agentd(1218): ERROR: Unable to send message to > server. > 2014/02/21 14:16:41 ossec-agentd(1218): ERROR: Unable to send message to > server. > 2014/02/21 14:16:42 ossec-agentd(4101): WARN: Waiting for server reply (not > started). Tried: '10.10.8.128'. > 2014/02/21 14:16:42 ossec-agentd: INFO: Trying next server ip in the line: > '10.10.8.128'. > 2014/02/21 14:16:43 ossec-agentd: INFO: Closing connection to server > (10.10.8.128:1519). > 2014/02/21 14:16:43 ossec-agentd: INFO: Trying to connect to server > (10.10.8.128:1519). > 2014/02/21 14:16:43 ossec-agentd: INFO: Using IPv4 for: 10.10.8.128 > > i dont understand what is the problem. I saw in a post that maybe to re join > the agent to the server so i deleted it and created it again but the same > error happens. > I checked networking issues and the port 1519 in the server both tcp and > udp are both closed when I scanned the server from the agent. > there isnt any firewall between the agent and the server. i also stopeed the > iptables service in the server just to try to solve it but nothing helped. > > what can be the issue? >
Port 1519 is odd, it's usually 1514. Make sure that ossec-remoted is listening on udp 1519 on the server. > thanks > marco > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/groups/opt_out. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
