On Nov 3, 2015 10:13 AM, "Reinaldo Fernandes" <[email protected]>
wrote:
>
> Hi Eero,
>
>
>
> Thank you for your reply but no Joy.
>
> All the hosts have the firewall deactivated.
>

Any luck finding any more info in the ossec.log file? Maybe just look for
stray parentheses in the ossec.conf.

>
>
> Best regards,
>
> Reinaldo
>
>
>
> terça-feira, 3 de Novembro de 2015 às 12:11:10 UTC, Reinaldo Fernandes
escreveu:
>>
>> Hello,
>>
>>
>>
>> My name is Reinaldo Fernandes and I’m contacting you regarding the Ossec
solution
>>
>> I have been trying to deploy this on our environment ( Windows mainly)
but the agent it’s not able to communicate with the Ossec server (They are
both on the same VLAN, no firewall between).
>>
>>
>>
>> This is the error:
>>
>>
>>
>> 2015/11/03 10:44:47 ossec-agent: INFO: Trying to connect to server (
172.20.21.43:1514).
>>
>>
>>
>> 2015/11/03 10:44:47 ossec-agent: INFO: Using IPv4 for: 172.20.21.43 .
>>
>>
>>
>> 2015/11/03 10:45:09 ossec-agent(4101): WARN: Waiting for server reply
(not started). Tried: '172.20.21.43'.
>>
>>
>>
>> When I try to look up at the logs on the Ossec server this is the only
info that I got:
>>
>>
>>
>> [root@ossec user]# /var/ossec/logs/ossec.log
>>
>> /var/ossec/logs/ossec.log: line 1: syntax error near unexpected token `('
>>
>> /var/ossec/logs/ossec.log: line 1: `2015/06/12 15:52:36
ossec-monitord(1225): INFO: SIGNAL Received. Exit Cleaning...'
>>
>>
>>
>> Any clue or tip on how to solve this situation?
>>
>>
>>
>> Reinaldo Fernandes
>
> --
>
> ---
> You received this message because you are subscribed to the Google Groups
"ossec-list" group.
> To unsubscribe from this group and stop receiving emails from it, send an
email to [email protected].
> For more options, visit https://groups.google.com/d/optout.

-- 

--- 
You received this message because you are subscribed to the Google Groups 
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to