I also saw "invalid message from agent id" messages (only 3 of them). I assumed they were related to my not having updated a Linux machine still running the old code. I updated that agent. Whether that was related or not, the messages stopped.
MT -----Original Message----- From: [email protected] [mailto:[EMAIL PROTECTED] On Behalf Of Peter M. Abraham Sent: Wednesday, May 21, 2008 6:36 AM To: ossec-list Subject: [ossec-list] Re: Windows agent disconnect Greetings Daniel: So far, 12 hours later and no disconnects. However, on the server version, I'm getting "invalid message from agent id: '28' (uname)" messages in /var/ossec/logs/ossec.log over and over and over and over again. Aside form there is no agent id 28 in our system, how can we stop this error message? Thank you.
