On Thu, Nov 12, 2015 at 10:19 AM, Dimitris <[email protected]> wrote: > Hello, > > Has this topic been resolved? > I have the same problem running agentless ossec scan on a server. I try to > test it manually with the command: > > sudo -u ossec ./agentless/ssh_integrity_check_linux [email protected] /tmp > > and I get the following after 20 seconds: > [...AFTER SHOWING DESTINATION SERVER BANNER...] > ERROR: Timeout while connecting to host: [email protected] . > > It seems that ssh_integrity_check_linux calls main.exp, main.exp sets > timeout 20 and times out somewhere after that... > =========== > ... > set use_sudo " " > set addpass "x" > set timeout 20 > ... > > ========== > > And then reads ssh.exp and sends the message: > > } > timeout { > send_user "\nERROR: Timeout while connecting to host: $hostname . > \n" > exit 1; > } > =========== > > ossec.conf relevant entry: > <agentless> > <type>ssh_integrity_check_linux</type> > <frequency>86400</frequency> > <host>[email protected]</host> > <state>periodic</state> > <arguments>/bin /etc /sbin</arguments> > > </agentless> > ========== > > Is it possible that the login banner used on the Red Hat target server feeds > expect with some argument not expected? > Any suggestions? >
Yes, that is most likely what is happening. > Thank you in advance, > Dimitris. > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
