[ossec-list] Ossec agent error
Hello, My name is Reinaldo Fernandes and I’m contacting you regarding the Ossec solution I have been trying to deploy this on our environment ( Windows mainly) but the agent it’s not able to communicate with the Ossec server (They are both on the same VLAN, no firewall between). *This is the error: * 2015/11/03 10:44:47 ossec-agent: INFO: Trying to connect to server (172.20.21.43:1514). 2015/11/03 10:44:47 ossec-agent: INFO: Using IPv4 for: 172.20.21.43 . 2015/11/03 10:45:09 ossec-agent(4101): WARN: Waiting for server reply (not started). Tried: '172.20.21.43'. *When I try to look up at the logs on the Ossec server this is the only info that I got:* [root@ossec user]# /var/ossec/logs/ossec.log /var/ossec/logs/ossec.log: line 1: syntax error near unexpected token `(' /var/ossec/logs/ossec.log: line 1: `2015/06/12 15:52:36 ossec-monitord(1225): INFO: SIGNAL Received. Exit Cleaning...' Any clue or tip on how to solve this situation? *Reinaldo Fernandes* -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[ossec-list] Ossec agent error
Hello, My name is Reinaldo Fernandes and I’m contacting you regarding the Ossec solution I have been trying to deploy this on our environment ( Windows mainly) but the agent it’s not able to communicate with the Ossec server (They are both on the same VLAN, no firewall between). *This is the error: * 2015/11/03 10:44:47 ossec-agent: INFO: Trying to connect to server (172.20.21.43:1514). 2015/11/03 10:44:47 ossec-agent: INFO: Using IPv4 for: 172.20.21.43 . 2015/11/03 10:45:09 ossec-agent(4101): WARN: Waiting for server reply (not started). Tried: '172.20.21.43'. *When I try to look up at the logs on the Ossec server this is the only info that I got:* [root@ossec user]# /var/ossec/logs/ossec.log /var/ossec/logs/ossec.log: line 1: syntax error near unexpected token `(' /var/ossec/logs/ossec.log: line 1: `2015/06/12 15:52:36 ossec-monitord(1225): INFO: SIGNAL Received. Exit Cleaning...' Any clue or tip on how to solve this situation? *Reinaldo Fernandes* -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [ossec-list] Ossec agent error
On Tue, Nov 3, 2015 at 7:09 AM, Reinaldo Fernandes wrote: > Hello, > > > > My name is Reinaldo Fernandes and I’m contacting you regarding the Ossec > solution > > I have been trying to deploy this on our environment ( Windows mainly) but > the agent it’s not able to communicate with the Ossec server (They are both > on the same VLAN, no firewall between). > > > > This is the error: > > > > 2015/11/03 10:44:47 ossec-agent: INFO: Trying to connect to server > (172.20.21.43:1514). > > > > 2015/11/03 10:44:47 ossec-agent: INFO: Using IPv4 for: 172.20.21.43 . > > > > 2015/11/03 10:45:09 ossec-agent(4101): WARN: Waiting for server reply (not > started). Tried: '172.20.21.43'. > > > > When I try to look up at the logs on the Ossec server this is the only info > that I got: > > > > [root@ossec user]# /var/ossec/logs/ossec.log > > /var/ossec/logs/ossec.log: line 1: syntax error near unexpected token `(' > > /var/ossec/logs/ossec.log: line 1: `2015/06/12 15:52:36 > ossec-monitord(1225): INFO: SIGNAL Received. Exit Cleaning...' > > > > Any clue or tip on how to solve this situation? > The ossec.log lines don't look familiar. Are there any lines preceding those that might provide more of a clue? It kind of looks like there is an issue with the ossec.conf on the manager. > > > Reinaldo Fernandes > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to ossec-list+unsubscr...@googlegroups.com. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [ossec-list] Ossec agent error
this is firewall issue.disable local firewall on ossec server. eero tiistai 3. marraskuuta 2015 Reinaldo Fernandes < fernandes.jreina...@gmail.com> kirjoitti: > Hello, > > > > My name is Reinaldo Fernandes and I’m contacting you regarding the Ossec > solution > > I have been trying to deploy this on our environment ( Windows mainly) but > the agent it’s not able to communicate with the Ossec server (They are both > on the same VLAN, no firewall between). > > > > *This is the error: * > > > > 2015/11/03 10:44:47 ossec-agent: INFO: Trying to connect to server ( > 172.20.21.43:1514). > > > > 2015/11/03 10:44:47 ossec-agent: INFO: Using IPv4 for: 172.20.21.43 . > > > > 2015/11/03 10:45:09 ossec-agent(4101): WARN: Waiting for server reply (not > started). Tried: '172.20.21.43'. > > > > *When I try to look up at the logs on the Ossec server this is the only > info that I got:* > > > > [root@ossec user]# /var/ossec/logs/ossec.log > > /var/ossec/logs/ossec.log: line 1: syntax error near unexpected token `(' > > /var/ossec/logs/ossec.log: line 1: `2015/06/12 15:52:36 > ossec-monitord(1225): INFO: SIGNAL Received. Exit Cleaning...' > > > > Any clue or tip on how to solve this situation? > > > > *Reinaldo Fernandes* > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to ossec-list+unsubscr...@googlegroups.com > > . > For more options, visit https://groups.google.com/d/optout. > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[ossec-list] ossec-agent: Error waiting mutex (timeout)
ossec-agent: Error waiting mutex (timeout) I'm seeing this error about every two minutes in the agent logs. Port 1514 is open and the agent can ping the server just fine. I've tried to do some research, but have found nothing. Does anyone know what I should be checking to solve this problem?