On Tue, Oct 25, 2016 at 8:49 AM, <[email protected]> wrote: > Hi, > > Agent to server communication issue is occurring on multiple machines and > below logs are getting generated on client machine. We have requested > customer to check packet drop on firewall but according to customer there is > no packet drop on firewall for client machines. > > 2016/10/25 16:33:19 ossec-agent(4101): WARN: Waiting for server reply (not > started). Tried: 'x.x.x.x'. > 2016/10/25 17:00:03 ossec-agent: INFO: Trying to connect to server > (x.x.x.x:1514). > 2016/10/25 17:00:03 ossec-agent: INFO: Using IPv4 for: x.x.x.x >
Are there any log messages related to this agent in the ossec.log on the server? Does the IP address of the packets from this agent (as seen with tcpdump on the OSSEC server) match the IP address in client.keys on the server? > Kindly help.. > > Regards > Vipin > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
