Hi Alejandro, The issue seems to be a counter problem since any other error would print an additional error message.
Try to remove the file: "/var/ossec/queue/rids/<N>" from the agent, for N being the agent ID. For example: rm /var/ossec/queue/rids/$(cut -d' ' -f1 /var/ossec/etc/client.keys) /var/ossec/bin/ossec-control restart An easier option is to disable the message verification: echo "remoted.verify_msg_id=0" >> /var/ossec/etc/local_internal_options.conf /var/ossec/bin/ossec-control restart Hope it helps. Best regards. On Mon, Jan 23, 2017 at 5:22 AM, Alejandro M <acheron...@gmail.com> wrote: > These are the messages I'm getting from Ossec on the side of the agent: > > 2017/01/22 09:42:44 ossec-agentd: INFO: Trying to connect to server > (x.x.x.10:1514). > 2017/01/22 09:42:44 ossec-agentd: INFO: Using IPv4 for: x.x.x.10 . > 2017/01/22 09:42:45 ossec-agentd(1214): WARN: Problem receiving message > from x.x.x.10. > 2017/01/22 09:42:54 ossec-agentd(1214): WARN: Problem receiving message > from x.x.x.10. > 2017/01/22 09:42:59 ossec-agentd(1214): WARN: Problem receiving message > from x.x.x.10. > 2017/01/22 09:43:05 ossec-agentd(1214): WARN: Problem receiving message > from x.x.x.10 > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to ossec-list+unsubscr...@googlegroups.com. > For more options, visit https://groups.google.com/d/optout. > -- Victor M. Fernandez-Castro IT Security Engineer Wazuh Inc. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
