As an experiment, try removing the agent with manage_agents. Then re-add it, but for the IP address try entering 'any' (without the quotes). Then export the key, import the key on the agent, restart, etc.
On Fri, Aug 24, 2012 at 10:41 AM, Michael Barrett <michael_barr...@mgic.com> wrote: > > > I turned logall on, doesn't seem to make a difference in the message > > How do I turn debug on? > > > > ____________________________________________ > Michael Barrett | Information Security Analyst - Lead | Mortgage Guaranty > Insurance Corporation > 270 E. Kilbourn Ave. | Milwaukee, WI 53202 USA | ( 1.414.347.6271 | 7 > 1.888.601.4440 | * michael_barr...@mgic.com > > This message is intended for use only by the person(s) addressed above and > may contain privileged and confidential information. Disclosure or use of > this message by any other person is strictly prohibited. If this message is > received in error, please notify the sender immediately and delete this > message. > > > > From: "dan (ddp)" <ddp...@gmail.com> > To: ossec-list@googlegroups.com > Date: 08/21/2012 11:40 AM > Subject: Re: [ossec-list] 2.5.1 > Sent by: ossec-list@googlegroups.com > > ________________________________ > > > > On Tue, Aug 21, 2012 at 12:36 PM, Michael Barrett > <michael_barr...@mgic.com> wrote: > > > > > > So if re-installing doesn't work, any ideas of what I can try? > > ____________________________________________ > > > Could there be a networking device messing things up in between? Is > this the only system having issues? Turn on logall on the server? Turn > on debug on the server? Try to add to the log message to get the > initial incorrectly formatted message? > > > Michael Barrett | Information Security Analyst - Lead | Mortgage Guaranty > > Insurance Corporation > > 270 E. Kilbourn Ave. | Milwaukee, WI 53202 USA | ( 1.414.347.6271 | 7 > > 1.888.601.4440 | * michael_barr...@mgic.com > > > > This message is intended for use only by the person(s) addressed above and > > may contain privileged and confidential information. Disclosure or use of > > this message by any other person is strictly prohibited. If this message is > > received in error, please notify the sender immediately and delete this > > message. > > > > > > > > From: "dan (ddp)" <ddp...@gmail.com> > > To: ossec-list@googlegroups.com > > Date: 08/21/2012 11:15 AM > > Subject: Re: [ossec-list] 2.5.1 > > Sent by: ossec-list@googlegroups.com > > > > ________________________________ > > > > > > > > On Tue, Aug 21, 2012 at 11:18 AM, Michael Barrett > > <michael_barr...@mgic.com> wrote: > > > > > > Is this the only agent on this network? Could there be a networking > > > device messing things up in between? Is this the only host having > > > issues? Is the server listening on multiple networks? What does v2.5.1 > > > have to do with this? > > > > > > > > > No this isn't the only host > > > > > > The server is only listening on one IP > > > > > > The agent has 2.5.1 and we are not ready to go to 2.6 and i wanted a > > > fresh > > > install > > > ________________________________ > > > > What are you going to do when 2.7 comes out? Wait till 2.8 is almost > > ready? > > > > ____________ > > > Michael Barrett | Information Security Analyst - Lead | Mortgage > > > Guaranty > > > Insurance Corporation > > > 270 E. Kilbourn Ave. | Milwaukee, WI 53202 USA | ( 1.414.347.6271 | 7 > > > 1.888.601.4440 | * michael_barr...@mgic.com > > > > > > This message is intended for use only by the person(s) addressed above > > > and > > > may contain privileged and confidential information. Disclosure or use > > > of > > > this message by any other person is strictly prohibited. If this message > > > is > > > received in error, please notify the sender immediately and delete this > > > message. > > > > > >
