On Wed, Feb 26, 2014 at 1:04 PM, OsO Roñoso <[email protected]> wrote: > Hi, > > i have a problem with install agent on Solaris 10, i read in other forum > but witout more success, somebody have any idea? ( the same agent in windows > and linux works fine ) > > root@lenga # /var/ossec/bin/ossec-control start > Starting OSSEC HIDS v2.7.1 (by Trend Micro Inc.)... > Deleting PID file '/var/ossec/var/run/ossec-logcollector-6253.pid' not > used... > ossec-execd already running... > Started ossec-agentd... > Started ossec-logcollector...
Try starting these 2 daemons manually, see if there are any extra or interesting logs to ossec.log. > 2014/02/26 14:36:02 ossec-syscheckd(1210): ERROR: Queue > '/var/ossec/queue/ossec/queue' not accessible: 'Destination address > required'. > 2014/02/26 14:36:02 ossec-rootcheck(1210): ERROR: Queue > '/var/ossec/queue/ossec/queue' not accessible: 'Destination address > required'. > 2014/02/26 14:36:10 ossec-syscheckd(1210): ERROR: Queue > '/var/ossec/queue/ossec/queue' not accessible: 'Destination address > required'. > 2014/02/26 14:36:10 ossec-rootcheck(1210): ERROR: Queue > '/var/ossec/queue/ossec/queue' not accessible: 'Destination address > required'. > 2014/02/26 14:36:23 ossec-syscheckd(1210): ERROR: Queue > '/var/ossec/queue/ossec/queue' not accessible: 'Destination address > required'. > 2014/02/26 14:36:23 ossec-rootcheck(1211): ERROR: Unable to access queue: > '/var/ossec/queue/ossec/queue'. Giving up.. > ossec-syscheckd did not start > > > root@lenga # ls -las > total 4 > 2 drwxrwx--- 2 root root 512 Feb 26 14:31 . > 2 dr-xr-x--- 7 root root 512 Feb 25 18:26 .. > 0 -rw-r--r-- 1 root root 0 Feb 25 18:34 .agent_info <---- > i changed own for ossec and root, same problem > 0 srw-rw---- 1 ossec ossec 0 Feb 25 18:34 queue > > If you need more details please let me know > > best regards > Can you provide the ossec.conf for this agent? > > > > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/groups/opt_out. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
