[ossec-list] Re: Waiting for server reply (not started)

[David Williams <davewill@xxxxxxxxxxxx>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

You may want to retest for firewall issues; I believe when I was
setting this up, I noticed I had to allow 1514 upd outbound to the
server (which it looks like works fine for you) but also inbound upd
from the server's port 1514 to the agent.
- -David

Tim wrote:
> On Apr 19, 1:58 pm, Jeremy Melanson <jmelan...@xxxxxxxxxxx> wrote:
>> You probably need to reload the OSSEC Server. After you add the host
>> keys, OSSEC needs to reread them. I don't recall which daemon (I suppose
>> I should look that up one of these days ;-). I usually just issue
>> 'ossec-control stop' and 'ossec-control start'.
>>
> 
> Did that - I even uninstalled/reinstalled the agent on the server
> side.  No luck.  But just to be safe, I just bounced it again.  Server
> shows it stopped/started:
> 
> 2007/04/19 14:33:30 ossec-execd(1314): Shutdown received. Deleting
> responses.
> 2007/04/19 14:33:30 ossec-execd(1225): SIGNAL Received. Exit
> Cleaning...
> 2007/04/19 14:33:30 ossec-execd: Started (pid: 29121).
> 
> but agent still can't see it:
> 
> 2007/04/19 14:39:38 ossec-agentd(4101): Waiting for server reply (not
> started).
> 2007/04/19 14:47:24 ossec-agentd(4101): Waiting for server reply (not
> started).
> 
> -- tim --
> 

- --
_______________________________________________
GPG (http://www.gnupg.org/) key available from:
http://www.kayakero.net/per/david/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGKB6ACzuSgviBh00RAr3QAJ9kMkHZbOYFgQjyr3z1IppohEw3PACZAfbE
gecbp4OVHRk9HusHRjfLSms=
=4sw0
-----END PGP SIGNATURE-----