Hi Dan, This is what I get in debug mode
2014/12/16 22:55:53 ossec-agentd: DEBUG: Starting ... 2014/12/16 22:55:53 ossec-agentd: INFO: Using notify time: 600 and max time to reconnect: 1800 2014/12/16 22:56:36 ossec-syscheckd: INFO: Starting syscheck scan (forwarding database). 2014/12/16 22:56:36 ossec-syscheckd: WARN: Process locked. Waiting for permission... 2014/12/16 22:57:12 ossec-syscheckd: INFO: Lock free. Continuing... 2014/12/16 22:57:12 ossec-syscheckd: INFO: Starting syscheck database (pre- scan). 2014/12/16 22:57:28 ossec-syscheckd: socket busy .. 2014/12/16 22:57:38 ossec-syscheckd: socket busy .. 2014/12/16 22:57:38 ossec-syscheckd(1224): ERROR: Error sending message to queue. 2014/12/16 22:57:53 ossec-syscheckd: socket busy .. 2014/12/16 22:58:00 ossec-logcollector: socket busy .. 2014/12/16 22:58:03 ossec-syscheckd: socket busy .. 2014/12/16 22:58:03 ossec-syscheckd(1224): ERROR: Error sending message to queue. 2014/12/16 22:58:10 ossec-logcollector: socket busy .. 2014/12/16 22:58:13 ossec-syscheckd: socket busy .. > I had to run the following command to remove the WARN: Process locked > message > rm /usr/local/ossec-hids/queue/ossec/.wait What is the ossec-syscheckd(1224): ERROR: Error sending message to queue.? Thank you Fred On Tuesday, 2 December 2014 13:47:36 UTC, Fred974 wrote: > > Hi Guys, > > This is my first post on here... > > I have recently installed ossec-hids on FreeBSD and looking at the agent > log, I get the following errormessage: > > 2014/12/01 13:37:41 ossec-syscheckd: socket busy .. > > 2014/12/01 13:37:42 ossec-logcollector: socket busy .. > 2014/12/01 13:37:51 ossec-syscheckd: socket busy .. > 2014/12/01 13:37:51 ossec-syscheckd(1224): ERROR: Error sending message to > queue. > > .. > > Just to clarify, I have the Ossec server installed on my FreeBSD host and > the agent in a Jail. > > I hope some people here can help me solve this problem.. > > The Firewall is off at the moment > > Thank you > > Fred > > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
