I'm pretty sure OSSEC agent/servers send ACK messages when they receive a message and also have a counter associated with what messages they've sent/received. I've had network issues between my agent and servers and once the connection is restored I see a large spike of messages as the server catches up.
--Josh On Mon, May 12, 2014 at 8:56 AM, dan (ddp) <ddp...@gmail.com> wrote: > On Mon, May 12, 2014 at 5:10 AM, Nguyễn Văn Hớn <honi...@gmail.com> wrote: > > > > hi everybody. > > when i see the picture.I wonder" how do you know certainly server get > the logs from agent. because it uses UDP port 1514" udp protocal never > check destination have recived packet when it send on network > > > > We still don't have a good answer. It's still something we're aware > of. It's still not an easy problem to solve. > > > -- > > > > --- > > You received this message because you are subscribed to the Google > Groups "ossec-list" group. > > To unsubscribe from this group and stop receiving emails from it, send > an email to ossec-list+unsubscr...@googlegroups.com. > > For more options, visit https://groups.google.com/d/optout. > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to ossec-list+unsubscr...@googlegroups.com. > For more options, visit https://groups.google.com/d/optout. > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
