On Tue, Jun 13, 2017 at 4:01 PM, Anthony Egbujor <aegbu...@gmail.com> wrote: > Hello. I have an issue. I am able to proct alerts and have it sent to my > email, but I am having trouble getting the server to communicate with the > agent. I already set the agent ip as the allowed Ip in secure in server, set > the client with the right Ip and port, and already extracted the key and > imported it into the agent, but the agent still cannot connect to server. > > > Error: > > 2017/06/13 11:38:15 ossec-agentd: INFO: Using IPv4 for: (ServerIP). > > 2017/06/13 11:38:25 ossec-agentd(1218): ERROR: Unable to send message to > server. > > 2017/06/13 11:38:37 ossec-agentd(1218): ERROR: Unable to send message to > server. > > 2017/06/13 11:38:38 ossec-agentd(4101): WARN: Waiting for server reply (not > started). Tried: (ServerIP). >
Are there any errors in the server's ossec.log? Restart the server processes in debug mode if necessary. Use tcpdump to see if the agent's traffic is making it to the server (from the expected source IP address). > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to ossec-list+unsubscr...@googlegroups.com. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
