Hello, Has this topic been resolved? I have the same problem running agentless ossec scan on a server. I try to test it manually with the command:
sudo -u ossec ./agentless/ssh_integrity_check_linux [email protected] /tmp and I get the following after 20 seconds: [...AFTER SHOWING DESTINATION SERVER BANNER...] ERROR: Timeout while connecting to host: [email protected] . It seems that ssh_integrity_check_linux calls main.exp, main.exp sets timeout 20 and times out somewhere after that... =========== ... set use_sudo " " set addpass "x" set timeout 20 ... ========== And then reads ssh.exp and sends the message: } timeout { send_user "\nERROR: Timeout while connecting to host: $hostname . \n" exit 1; } =========== ossec.conf relevant entry: <agentless> <type>ssh_integrity_check_linux</type> <frequency>86400</frequency> <host>[email protected]</host> <state>periodic</state> <arguments>/bin /etc /sbin</arguments> </agentless> ========== Is it possible that the login banner used on the Red Hat target server feeds expect with some argument not expected? Any suggestions? Thank you in advance, Dimitris. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
