On Thu, Feb 25, 2016 at 7:06 AM, Robert <[email protected]> wrote: > Hi, > > A tried, nothing changed. > But after few hours the client started to work...weird. > And now, three other clients stpped to work, they are on "Disconnected" > state. > It is strange becouse the agent's log says: ossec-agentd(4102): INFO: > Connected to the server (192.168.7.212:1514) > No error message, and also no error message on the server side. > tcpdump shows correct communication between the agent and the server.... > I am getting fed up with this :) > > Any thoughts? >
Turn on debugging on the server (`/var/ossec/bin/ossec-control enable debug && /var/ossec/bin/ossec-control restart`). Check ossec.log for better logs. Verify there are no duplicate agent IDs in client.keys. Verify there are no duplicate IP addresses in client.keys. > Robert > > > 2016. február 3., szerda 20:57:59 UTC+1 időpontban Pedro S a következőt > írta: >> >> Hi, >> >> Try to add the agent with "any" parameter on IP field (./manage_agents), >> when "ip" question prompt, write "any", just for testing, maybe the agent IP >> when reaching OSSEC it is not the IP you are writting. >> >> > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
