Hi Dan, Thank you very much for your reply. I'm self leaning Unix so please bare with me here.
I have no error message on the ossec server log when i start it normally or in debug mode. Is there a way to start the agent in debug mode? I could find an option. How can I see if the the packets reaching the manager? I tried tcpdump -i lagg0 dst 192.168.1.125 and port 1514 but couldn't see any activities. I asked the guys on the FreeBSD forum if they could help but I have no reply so far. You can find all my config file here http://forums.freebsd.org/threads/freebsd-10-ossec-jail-problem.49228/#post-275393 Hope you can help. Thank you On Tuesday, 2 December 2014 13:47:36 UTC, Fred974 wrote: > > Hi Guys, > > This is my first post on here... > > I have recently installed ossec-hids on FreeBSD and looking at the agent > log, I get the following errormessage: > > 2014/12/01 13:37:41 ossec-syscheckd: socket busy .. > > 2014/12/01 13:37:42 ossec-logcollector: socket busy .. > 2014/12/01 13:37:51 ossec-syscheckd: socket busy .. > 2014/12/01 13:37:51 ossec-syscheckd(1224): ERROR: Error sending message to > queue. > > .. > > Just to clarify, I have the Ossec server installed on my FreeBSD host and > the agent in a Jail. > > I hope some people here can help me solve this problem.. > > The Firewall is off at the moment > > Thank you > > Fred > > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
