Hi Robert, the same agent id? Try this, in ossecpath/etc/internal-options.conf modify remoted.verify_msg_id=1 to 0 in both places, agent and manager
regards > On 02 Feb 2016, at 16:56, Robert <[email protected]> wrote: > > Hi, > > This problem drives me crazy. > I already followed the guide > <http://ossec-docs.readthedocs.org/en/latest/faq/unexpected.html#the-communication-between-my-agent-and-the-server-is-not-working-what-to-do>, > and removed, readded one of my agent, but is still get this error message: > ossec-remoted(1403): ERROR: Incorrectly formated message from '192.168.8.43'. > > As i checked the client information on the server side and client side are > the same, everything looks correct. > > Do you have any idea what could cause the problem? > > Thanks, Robert > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected] > <mailto:[email protected]>. > For more options, visit https://groups.google.com/d/optout > <https://groups.google.com/d/optout>. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
