[ossec-list] Re: Waiting for server reply (not started)

["Daniel Cid" <daniel.cid@xxxxxxxxx>]

Hi Tim,

I just added a new entry to the wiki with more information regarding it:

http://www.ossec.net/wiki/index.php/Errors:AgentCommunication

Can you try all the steps in there to see if it works? If not, we would need to
see your logs (from server and agent) to try to figure out what is happening.

Thanks,

--
Daniel B. Cid
dcid ( at ) ossec.net


On 6/29/07, Tim Boyer <tim@xxxxxxxxxxxxxx> wrote:
>
>
> Yup.  Just tried it again, just to be sure - no luck.
>
>
> Hi Tim,
>
> Did you restart the server after adding the new agents? And after that start
> the new agents?
>
> E.
>
>
> 2007/6/29, Tim Boyer <tim@xxxxxxxxxxxxxx>:
> >
> > You know you're getting old when you google for an answer - and find one
> of
> > your own posts.  But this is _slightly_ different.
> >
> > I'm getting the subject's error on a client.  The last time it happened,
> it
> > was a firewall issue - I was letting port 1514 out, but not back in.  This
> > time, I'm letting 1514 go both ways.
> >
> > [root@kyushu logs]# nc -u 192.168.1.200 1514
> > Testing going to the server
> >
> > [root@buran bin]# nc -ul 1514
> > Testing going to the server
> >
> > [root@buran bin]# nc -u 192.168.42.1 1514
> > Testing going back
> >
> > [root@kyushu logs]# nc -ul -p 1514
> > Testing going back
> >
> > So it's not a firewall issue.  Reinforcing this is the fact that I've got
> a
> > half-dozen agents working fine:
> >
> > [root@buran bin]# ./list_agents -a
> > defiant-192.168.1.130 is available.
> > roosevelt-192.168.1.80 is available.
> > gage-192.168.2.95 is available.
> > melbourne-192.168.1.90 is available.
> > saratoga-192.168.1.250 is available.
> > challenger-192.168.1.79 is available.
> > tolstoy-192.168.1.75 is available.
> >
> > I've deleted the agent keys and re-created them, and then re-imported them
> -
> > so it's not that.  Anyone have any suggestions?
> >
> > Thanks,
> >
> > --
> > Tim Boyer
> > Director
> > Information Systems and Engineering Projects
> > Denman Tire Corporation
> > tim@xxxxxxxxxxxxxx
> >
> >
>
>