Re: [ossec-list] Port 1514 Not Listening

On Wednesday, 16 September 2015 21:15:14 UTC+1, Kat wrote: > > Just a silly question I don't see in this thread -- do you have ANY > clients defined on the server itself?? > > What is currently in /var/ossec/etc/clients.keys? > That's not a silly question at all, especially if authd is being

Re: [ossec-list] Port 1514 Not Listening

Just a silly question I don't see in this thread -- do you have ANY clients defined on the server itself?? What is currently in /var/ossec/etc/clients.keys? -Kat -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this

Re: [ossec-list] Port 1514 Not Listening

James Oliver Pormento said: > >Hi, > >-A INPUT -s [OSSEC Agent's IP]/32 -p tcp -m tcp --dport 1514 -j ACCEPT >-A INPUT -s [OSSEC Agent's IP]/32 -p tcp -m tcp --dport 1514 -j ACCEPT > > The agent's IPs are different. Another question, should we remove the >tcp

Re: [ossec-list] Port 1514 Not Listening

James Oliver Pormento said: > >We tried to execute this "-A INPUT -m udp -p udp -s 10.20.30.40 --sport >1514 -j ACCEPT" and saved it on the OSSEC Server. The --sport 1514 line goes on the agent, so it can receive the responses from the server. UDP is

Re: [ossec-list] Port 1514 Not Listening

Hi, -A INPUT -s [OSSEC Agent's IP]/32 -p tcp -m tcp --dport 1514 -j ACCEPT -A INPUT -s [OSSEC Agent's IP]/32 -p tcp -m tcp --dport 1514 -j ACCEPT > The agent's IPs are different. Another question, should we remove the tcp port 1514? Will having both ports tcp 1514 and udp 1514 at the same time

[ossec-list] Port 1514 Not Listening

Hi, We have installed OSSEC server v2.8.2 in CentOs. After installation, it seems that port 1514 is not listening. We used the default port(1514) during installation. We've tried to check using this command in CentOs: *netstat -tlnp |grep 1514* and did not got anything. May we ask the following

[ossec-list] Port 1514 Not Listening

Hi, We have installed OSSEC server v2.8.2 in CentOs. After installation, it seems that port 1514 is not listening. We used the default port(1514) during installation. We've tried to check using this command in CentOs: *netstat -tlnp |grep 1514* and did not got anything. May we ask the

Re: [ossec-list] Port 1514 Not Listening

Hi, Thank you for that suggestion. We're also getting this error 'ossec-remoted(1206): ERROR: Unable to Bind port '1514'' in the ossec.log. We already double-checked and confirmed that only ossec-remoted is using the port 1514. Any ideas/suggestions about the error? Thanks. Regards, *James

Re: [ossec-list] Port 1514 Not Listening

On Wed, Sep 9, 2015 at 1:17 AM, James Oliver Pormento wrote: > Hi, > > We have installed OSSEC server v2.8.2 in CentOs. After installation, it > seems that port 1514 is not listening. We used the default port(1514) during > installation. We've tried to check using

Re: [ossec-list] Port 1514 Not Listening

On Wed, Sep 9, 2015 at 7:51 AM, James Oliver Pormento wrote: > > Hi, > > Thank you for that suggestion. > We're also getting this error 'ossec-remoted(1206): ERROR: Unable to Bind > port '1514'' in the ossec.log. We already double-checked and confirmed that >

Re: [ossec-list] Port 1514 Not Listening

James Oliver Pormento said: > >We have installed OSSEC server v2.8.2 in CentOs. After installation, it >seems that port 1514 is not listening. We used the default port(1514) >during installation. We've tried to check using this command in >CentOs: *netstat >-tlnp

Re: [ossec-list] Port 1514 Not Listening

HI, Thank you for the info. This is what we've got upon trying "netstat -ulnp": Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name udp0 0xxx.xx.xxx.xxx:1514

Re: [ossec-list] Port 1514 Not Listening

On Sep 9, 2015 8:51 PM, "James Oliver Pormento" < james.porme...@pointwest.com.ph> wrote: > > HI, > > Thank you for the info. > This is what we've got upon trying "netstat -ulnp": > > Active Internet connections (only servers) > Proto Recv-Q Send-Q Local Address Foreign Address

Re: [ossec-list] Port 1514 Not Listening

Hi, We tried to execute this "-A INPUT -m udp -p udp -s 10.20.30.40 --sport 1514 -j ACCEPT" and saved it on the OSSEC Server. Below is what our OSSEC server's iptables looks like: *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [0:0] -A INPUT -s xxx.xxx.xx.xx/32 -p tcp -m tcp

Re: [ossec-list] Port 1514 Not Listening

James Oliver Pormento said: > >HI, > >Thank you for the info. >This is what we've got upon trying "netstat -ulnp": > >Active Internet connections (only servers) >Proto Recv-Q Send-Q Local Address Foreign >Address State

[ossec-list] port 1514 not listening after install

Hi, I installed version 1.4. It never asked me what version of the HIDS I wanted to install server/agent etc. So I just went with the defaults. When it starts up everything seems to be fine but when I do a netstat - tupln | grep 1514 the required port is not listening. Ossec is definitely