Thank you, Dan. The ossec-agent os is 2.9.1 Alienvault version is 5.5.0
This is the log I got from Alienvault server, [image: image.png] This is from ossec agent [image: image.png] Your prompt reply will be appreciated. On Wed, Mar 4, 2020 at 2:44 PM dan (ddp) <ddp...@gmail.com> wrote: > On Wed, Mar 4, 2020 at 8:38 AM AHMED ADEWUYI <adewuyiahm...@gmail.com> > wrote: > > > > Hello, > > > > I am experiencing frequent ossec agent disconnected from AlienVault > server. > > > > I have removed the RIDS files on the client and server, yet isn't > connecting. > > > > please what can i do to keep it up and running again. > > > > Here is the log i am getting from the ossec agent. > > > > You might get better help by talking to the alienvault folks. > What version of OSSEC are you using? > What OS/version is the agent? > > Check the ossec.log on the server for any log messages about the agent. > You may need to turn on debugging on the server to see anything. > Use tcpdump to make sure the packets from the agent are making it to the > server. > Make sure these packets look like they're coming from the IP address > the server expects them to come from. > If there are replies from the server, make sure they are making it to the > agent. > > > -- > > > > --- > > You received this message because you are subscribed to the Google > Groups "ossec-list" group. > > To unsubscribe from this group and stop receiving emails from it, send > an email to ossec-list+unsubscr...@googlegroups.com. > > To view this discussion on the web visit > https://groups.google.com/d/msgid/ossec-list/4fb3b704-2c9f-4af1-bca6-0b74f297d6ec%40googlegroups.com > . > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to ossec-list+unsubscr...@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/ossec-list/CAMyQvMq%2B6OBNYRZyE1JLBHRv7Rt%3Ds3Mq6kPRwH5vU%3DBJQizb2g%40mail.gmail.com > . > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/ossec-list/CAD1RMNyrUy4XUYPDs40H2dACXe1HDYTZCXiKTXrvE9NGtQFRQQ%40mail.gmail.com.
