On Mon, Nov 9, 2020 at 7:37 AM Ziv Mansour <ziv.mans...@gmail.com> wrote: > > Hey, we're trying to connect our Windows servers to OSSEC. > It works for some of them, as for others it isn't. > > The error: ERROR: Incorrectly formatted message from > > We used the correct key, as it works on some servers.
Are each of the keys installed on each server unique? They need to be unique. Are the packets from the rejected servers coming from the correct IP addresses (you can use tcpdump on the ossec server to make sure)? > We tried these links: > > https://www.ossec.net/docs/faq/unexpected.html#how-do-i-troubleshoot-ossec > https://www.ossec.net/docs/faq/unexpected.html#agent-won-t-connect-to-the-manager-or-the-agent-always-shows-never-connected > https://www.ossec.net/docs/faq/unexpected.html#the-communication-between-my-agent-and-the-server-is-not-working-what-to-do > > How does it work here? > Who do we talk to and can anyone help? > > Also my personal mail: > ziv.mans...@gmail.com > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to ossec-list+unsubscr...@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/ossec-list/4e8368c2-6d75-42db-80e2-d91024b79675n%40googlegroups.com. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/ossec-list/CAMyQvMp8ep6tVe-x4B7vmMQKNr26RUDABg3EXvRtJfWuRABoRg%40mail.gmail.com.
