On Mon, Apr 22, 2019 at 4:14 AM Abid Raza
wrote:
>
> any update Sir.
>
>From the tiny picture you posted, it doesn't look like OSSEC traffic
is making it to (or from?) that system.
If that was from the OSSEC server, something seems to be blocking the
traffic somewhere between the agents and the s
any update Sir.
On Tuesday, 16 April 2019 17:50:57 UTC+5, Abid Raza wrote:
>
> PFA the result.
>
> On Saturday, 13 April 2019 07:08:51 UTC+5, dan (ddpbsd) wrote:
>>
>> On Thu, Apr 11, 2019 at 8:17 AM Abid Raza
>> wrote:
>> >
>> > Hi,
>> >
>> > I can see the keys in the client.keys file. Co
PFA the result.
On Saturday, 13 April 2019 07:08:51 UTC+5, dan (ddpbsd) wrote:
>
> On Thu, Apr 11, 2019 at 8:17 AM Abid Raza
> > wrote:
> >
> > Hi,
> >
> > I can see the keys in the client.keys file. Could you please let me know
> the steps to check the OSSEC Traffic you mentioned in your l
On Thu, Apr 11, 2019 at 8:17 AM Abid Raza
wrote:
>
> Hi,
>
> I can see the keys in the client.keys file. Could you please let me know the
> steps to check the OSSEC Traffic you mentioned in your last email?
>
Replace INTERFACE with the name of your network interface.
`sudo tcpdump -nni INTERFAC
Could you please help me here?
On Thursday, 11 April 2019 17:17:04 UTC+5, Abid Raza wrote:
>
> Hi,
>
> I can see the keys in the client.keys file. Could you please let me know
> the steps to check the OSSEC Traffic you mentioned in your last email?
>
> On Tuesday, 9 April 2019 17:19:35 UTC+5, d
Hi,
I can see the keys in the client.keys file. Could you please let me know
the steps to check the OSSEC Traffic you mentioned in your last email?
On Tuesday, 9 April 2019 17:19:35 UTC+5, dan (ddpbsd) wrote:
>
> On Tue, Apr 9, 2019 at 3:09 AM Abid Raza
> > wrote:
> >
> > Hi,
> >
> > List-
On Tue, Apr 9, 2019 at 3:09 AM Abid Raza
wrote:
>
> Hi,
>
> List-agents -n shows nothing. Please see the attached snapshot.
That's strange. Verify the agents are added by checking
`/var/ossec/etc/client.keys` (don't post that, it has secrets)
Nothing related in the ossec.log that I saw, but image
On Mon, Apr 8, 2019 at 10:13 AM Abid Raza
wrote:
>
> Team,
>
> I have recently installed an standalone OSSEC 3.2 Server and added my Active
> Directory servers as agents. I have also installed OSSEC AGent v3.2 or my
> Domain Controllers and started the agent service.
>
> I don't see any logs in
Team,
I have recently installed an standalone OSSEC 3.2 Server and added my
Active Directory servers as agents. I have also installed OSSEC AGent v3.2
or my Domain Controllers and started the agent service.
I don't see any logs in the archive.log or ossec.log file. Furthermore,
When I run the
Hi Dan,
I did upgrade the newest verison 2.4
the only reason I was using this version was I had the vmware image
from my book. I was going to learn on this version first, since it was
a working version.
Now by biggest problem is getting ossec to work with a mysql.
It keeps disconnecting.
What says "No agent available"?
You should really use the latest version, 1.4 is ANCIENT.
On Tue, Aug 3, 2010 at 6:48 PM, Mike Smith wrote:
> Hello,
>
> I just got my OSSEC HIDS system up and running, with my Syngress book,
> it is version 1.4. But I'm getting a No Agent Available. How do I
> f
Hello,
I just got my OSSEC HIDS system up and running, with my Syngress book,
it is version 1.4. But I'm getting a No Agent Available. How do I
find out what the problem could be?
Thanks,
-Troy
If you're using the secure option, it uses port 1514. If you're using
syslog, I think it uses 514.
On Tue, Jun 1, 2010 at 9:59 AM, BOUTROUILLE PASCAL
wrote:
> Hello
>
>
>
> I always have a problem with the ossec server
>
> I do a new installation from debian to kubuntu.
>
> It ‘s better, because
Hello
I always have a problem with the ossec server
I do a new installation from debian to kubuntu.
It 's better, because the server see now itself in the agent available, so i
have 1 agent : the server.
I have created 2 other agent : 1 windows and 1 debian :
/var/ossec/bin# ./agent_c
gt; part de Nerijus Krukauskas
> Envoyé : vendredi 21 mai 2010 13:35
> À : ossec-list@googlegroups.com
> Objet : Re: [ossec-list] No agent available
>
> On 2010-05-20, BOUTROUILLE PASCAL wrote:
>> 2010/05/17 23:27:26 agent_control(1210): ERROR: Queue '/queue/alerts/ar&
Hello
Please, help !
-Message d'origine-
De : ossec-list@googlegroups.com [mailto:ossec-l...@googlegroups.com] De la
part de BOUTROUILLE PASCAL
Envoyé : vendredi 21 mai 2010 15:46
À : ossec-list@googlegroups.com
Objet : RE: [ossec-list] No agent available
Yes the directory
Thank you
-Message d'origine-
De : ossec-list@googlegroups.com [mailto:ossec-l...@googlegroups.com] De la
part de Nerijus Krukauskas
Envoyé : vendredi 21 mai 2010 13:35
À : ossec-list@googlegroups.com
Objet : Re: [ossec-list] No agent available
On 2010-05-20, BOUTROUILLE PASCAL
On 2010-05-20, BOUTROUILLE PASCAL wrote:
> 2010/05/17 23:27:26 agent_control(1210): ERROR: Queue '/queue/alerts/ar' not
> accessible: 'Queue not found'.
Well, I'd start from here. Does this directory exist? What are the
owner/group and permissions for it?
--
http://nk99.org/
wxrwxrwx 1 root root 0 2010-05-20 11:01 /var/run/nscd/socket
-Message d'origine-
De : BOUTROUILLE PASCAL
Envoyé : jeudi 20 mai 2010 10:52
À : 'ossec-list@googlegroups.com'
Objet : RE: [ossec-list] No agent available
Hello
Here the response :
ps -ef | grep /var/ossec/bin/ossec-remoted
t_control(1301): ERROR: Unable to connect to active
response queue.
** Unable to connect to remoted.
Thank you
-Message d'origine-
De : ossec-list@googlegroups.com [mailto:ossec-l...@googlegroups.com] De la
part de dan (ddp)
Envoyé : mercredi 19 mai 2010 17:49
À : ossec-list@go
On Wed, May 19, 2010 at 5:08 AM, BOUTROUILLE PASCAL
wrote:
>
>
>
> Hello
>
> I go on to search, and i have installed a new server today, but always the
> same message : no agent available
> debiantest:~# /var/ossec/bin/agent_control -l
>
> OSSEC HIDS agent_control. List of available agents:
> I
s.com [mailto:ossec-l...@googlegroups.com] De la
part de BOUTROUILLE PASCAL
Envoyé : mardi 18 mai 2010 17:19
À : ossec-list@googlegroups.com
Objet : RE: [ossec-list] No agent available
Thank you
So i have modified:
debiantest:/tmp# grep ossec /etc/passwd
ossec:x:1001:1001::/var/ossec:/bin/false
oss
s.com [mailto:ossec-l...@googlegroups.com] De la
part de dan (ddp)
Envoyé : mardi 18 mai 2010 14:26
À : ossec-list@googlegroups.com
Objet : Re: [ossec-list] No agent available
On Tue, May 18, 2010 at 4:44 AM, BOUTROUILLE PASCAL
wrote:
>
> Hello
>
> I have a problem with the installation of
Your mail made it through (although I don't know the answer off hand).
On Tue, May 18, 2010 at 9:21 AM, Rich Rumble wrote:
> I am having the same issue, the email I sent yesterday doesn't seem to have
> been posted (grr google groups)
On Tue, May 18, 2010 at 4:44 AM, BOUTROUILLE PASCAL
wrote:
>
> Hello
>
> I have a problem with the installation of ossec.
>
> After the installation i have the message « No agent available. »
>
> I have read the forum but i dont find the solution. Here the problem :
>
>
> /etc/init.d/ossec start
>
I am having the same issue, the email I sent yesterday doesn't seem to have
been posted (grr google groups)
>I can't figure out why no agent is connecting to my server, new or old. I'd
like to back up the keys DB and remake the server, and restore the keys. I
do not want to generate 500+ keys by h
Hello
I have a problem with the installation of ossec.
After the installation i have the message < No agent available. >
I have read the forum but i dont find the solution. Here the problem :
/etc/init.d/ossec start
Starting OSSEC HIDS v2.4.1 (by Trend Micro Inc.)...
2010/05
Hi,
Hope someone can help.
I've just added OSSEC to a Ubuntu server and I am trying to get OSSEC to
work properly.. Had a few issues getting it installed but it was only
down to missing packages which where required. After eventually getting
a complete and successful install, adding the WU
i have a problem with web interface...
i have installed with ./setup.sh
when i want access the page http://localhost/ossec
i have this message " No agent available "
what can i do now ???
but i receive alert by mail from this computer.
--
Sébastien
Houle
infoglobe.tc2l
1963,
Frank-
29 matches
Mail list logo
