[ossec-list] Re: Installation Problem

[freenet <tomotom@xxxxxxxxxx>]

Daniel Cid schrieb:
>
> Hi Josh,
>
> I will answer you inline..
>
> On 11/25/06, Tuck, Josh <jtuck@xxxxxxxxxxxxx> wrote:
>>
>>
>> I am running the ossec server on Fedora core 6, and my agent is on a 
>> windows
>> 2003 server box.  Both are on the same network, connectivity is fine.  I
>> have installed the server, added the agent, exported the key, installed
>> agent, and imported key.  I am still getting the error
>
> Did you restart the server after adding the keys? May sound like a stupid
> question, but some people forget to do it..
>
>
>> Ossec-agent (4101):  waiting for server reply (not started).
>
>
> What do you have in the logs from the server? They should be at
> /var/ossec/logs/ossec.log .
>
>
>
>> I cannot telnet to port 1514 from the windows box to the linux box, 
>> and have
>> ran nessus, and it shows that port not being open.  I have went step by
>> step, and still can't seem to figure out what I am missing.  This is 
>> about
>> my 5th installation of ossec, and still can't seem to get it right.  Can
>> anyone help?
>
> OSSEC uses udp, so telneting to port 1514 will not help. You could 
> netcat (-u)
> to port 1514 to test it. In addition to that, do you have a firewall 
> configured
> in your fedora box? You need to make sure that port 1514 UDP is open.
>
>
>>
>>
>> Thanks in advance,
>
>
> Hope it helps...
>
> -- 
> Daniel B. Cid
> dcid ( at ) ossec.net
>
>