Re: [ossec-list] LibSSL error on Linux 8
On Mon, Mar 2, 2020 at 9:25 AM Kumar G wrote: > > Hi Team, > > > Need your help on this one. > > We are at 3.1X version of OSSEC environment. When trying to install the > package on Linux 8 and starting the agent we get an errorr on libssl. > > error while loading shared libraries: libssl.so.10: cannot open shared object > file: No such file or directory > ossec-execd did not start > > Similar message we get when starting the agent-auth daemon. > > We tried to create a soft link for the existing libssl file. What would be > the possible solution to fix this problem? > > Are any one one he Linux 8 facing this issue? > > Thanks and Regards > Kumar > What is "Linux 8"? How are you installing OSSEC? > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to ossec-list+unsubscr...@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/ossec-list/CALUtmTF4C6pNj8NZh788o776OvQTfZL6Jkeva59zmq31aMWURQ%40mail.gmail.com. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/ossec-list/CAMyQvMptL6Y6qx1meqpqvVHDX%2BLU%3DmcZr25bnkcRyX9%3DRNayvg%40mail.gmail.com.
Re: [ossec-list] ossec agent disconnected.
On Wed, Mar 4, 2020 at 8:38 AM AHMED ADEWUYI wrote: > > Hello, > > I am experiencing frequent ossec agent disconnected from AlienVault server. > > I have removed the RIDS files on the client and server, yet isn't connecting. > > please what can i do to keep it up and running again. > > Here is the log i am getting from the ossec agent. > You might get better help by talking to the alienvault folks. What version of OSSEC are you using? What OS/version is the agent? Check the ossec.log on the server for any log messages about the agent. You may need to turn on debugging on the server to see anything. Use tcpdump to make sure the packets from the agent are making it to the server. Make sure these packets look like they're coming from the IP address the server expects them to come from. If there are replies from the server, make sure they are making it to the agent. > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to ossec-list+unsubscr...@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/ossec-list/4fb3b704-2c9f-4af1-bca6-0b74f297d6ec%40googlegroups.com. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/ossec-list/CAMyQvMq%2B6OBNYRZyE1JLBHRv7Rt%3Ds3Mq6kPRwH5vU%3DBJQizb2g%40mail.gmail.com.
[ossec-list] ossec agent disconnected.
Hello, I am experiencing frequent ossec agent disconnected from AlienVault server. I have removed the RIDS files on the client and server, yet isn't connecting. please what can i do to keep it up and running again. Here is the log i am getting from the ossec agent. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/ossec-list/4fb3b704-2c9f-4af1-bca6-0b74f297d6ec%40googlegroups.com.
[ossec-list] Re: Alienvault OSSEC 2.8 a couple of computers are showing disconnected from the webGUI and I don't know how to get them reconnected
Good day, Please this is not resolving my problem, any other option? Thanks in anticipation. On Monday, September 12, 2016 at 11:52:57 PM UTC+1, che...@usa.g4s.com wrote: > > I tried to reinstall the agent manually and push it from the web GUI. I > made sure the OSSEC agent manager ip was pointing to the right server. > I would like to not jailbreak the server if possible. > > > I looked at the logs and this seems like a regular issue. > > 2016/09/12 16:59:45 ossec-agent(4101): WARN: Waiting for server reply (not > started). Tried: 'ip'. > > 2016/09/12 17:01:53 ossec-agent: INFO: Trying to connect to server > (ip:1514). > > 2016/09/12 17:01:53 ossec-agent: INFO: Using IPv4 for: ip. > > 2016/09/12 17:02:14 ossec-agent(4101): WARN: Waiting for server reply (not > started). Tried: 'ip'. > > 2016/09/12 17:03:11 ossec-agent: Using notify time: 120 and max time to > reconnect: 240 > > 2016/09/12 17:03:11 ossec-execd: INFO: Started (pid: ip). > > 2016/09/12 17:03:11 ossec-agent(1410): INFO: Reading authentication keys > file. > > 2016/09/12 17:03:11 ossec-agent: INFO: No previous counter available for > 'Host-ip'. > > 2016/09/12 17:03:11 ossec-agent: INFO: Assigning counter for agent > Host-ip: '0:0'. > > 2016/09/12 17:03:11 ossec-agent: INFO: Assigning sender counter: 0:84 > > 2016/09/12 17:03:11 ossec-agent: INFO: Trying to connect to server > (ip:1514). > > > > > > This company is part of the G4S group of companies. This communication > contains information which may be confidential, personal and/or privileged. > It is for the exclusive use of the intended recipient(s). If you are not > the intended recipient(s), please note that any distribution, forwarding, > copying or use of this communication or the information in it is strictly > prohibited. Any personal views expressed in this e-mail are those of the > individual sender and the Company does not endorse or accept responsibility > for them. Prior to taking any action based upon this e-mail message, you > should seek appropriate confirmation of its authenticity. This message has > been checked for viruses on behalf of the Company. > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/ossec-list/7947fda1-ad7c-423d-b92d-707e7f43e1af%40googlegroups.com.
