[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[ossec-list] ossec-agentd: error compressing string



I'm trying to get an ossec agent to communicate with my ossec server.  I
have the server listening on port 1514, with my subnet added into the
'allowed-ips'.  On the agent, I installed the software, created the key
on the server, imported that key on the agent.  I configured ossec.conf
on the agent to communicate with the server using the port 1514 and
started the server and then the client.

With a tcpdump running, looking for *any* traffic to or from the server
host, I see no packets exchanged.  Looking in the logs on the client I
see this:

On both client and server, the client.xml keys match exactly.

2006/08/08 09:11:50 ossec-agentd: No previous counter available for 'blair'.
2006/08/08 09:11:50 ossec-agentd: Assigning counter for agent blair: '0:0'.
2006/08/08 09:11:50 ossec-agentd: No previous sender counter.
2006/08/08 09:11:50 ossec-agentd: Assigning sender counter: 0:0
2006/08/08 09:11:50 ossec-agentd: Started (pid: 19736).
2006/08/08 09:11:50 ossec-agentd(2201): Error compressing string:
'52xxcd4a8xx85449c7xx98e7d1cxxac270890000000000:0001:#!-Linux
xx.xx.xx.xx x.x.x-x.x #1 SMP xxx xxx xx xx:xx:xx EST 2006 x86_64
b8c84b96833338cec9584305d652c325 rootkit_trojans.txt
e8131ce90d4ac82863f045c08eeedfd6 rootkit_files.txt
'.
2006/08/08 09:11:50 ossec-agentd(1217): Error creating encrypted message.

What does this mean?  How can I fix this?  Thanks for your help!

-- 
-dave


OSSEC home | Main Index | Thread Index


OSSEC project: www.ossec.net.
Mailling list information: http://www.ossec.net/en/mailing_lists.html.