I delete some flies located in c:\Windows\system32 in my Windows agent. But the server records nothing in its alerts log. What is the reason? Thanks. BTW1:in the log of my agent side, i can see such records averagely every less an hour: xxH:xxM:xxS ossec-agent: Server unavailable. Setting lock. xxH:xxM:(xx+n)S ossec-agent: Server responded. Releasing lock. Because of this? BTW2: Due to my sepcial needs, I limit the output tcp/udp connection as no more than 50/min. Because of this? _________________________________________________________________ Discover the new Windows Vista http://search.msn.com/results.aspx?q=windows+vista&mkt=en-US&form=QBRE