[ossec-list] Re: Problems faced with OSSEC.

["Pankaj P. Pawar" <Pankajpa@xxxxxxxxxx>]

***********************************************************************************
This message is for the named addressees' use only. It may contain NSDL

confidential, proprietary or legally privileged information. If you receive 

this message in error, please immediately delete it. You must not, directly

or indirectly, use, disclose, distribute, print, or copy any part of this message

if you are not the intended recipient.Unless otherwise stated, any commercial

information given in this message does not constitute an offer to deal on 

any terms quoted.  Any reference to the terms of executed transactions 

should be treated as preliminary only and subject to our formal written 

confirmation.
***********************************************************************************

***********************
Your mail has been scanned by InterScan.
***********-***********

Hi Daniel,

Attached are files required.
Kindly let me know if anything else is required.

Thanks,
Pankaj P.

-----Original Message-----
From: ossec-list@xxxxxxxxxxxxxxxx [mailto:ossec-list@xxxxxxxxxxxxxxxx]
On Behalf Of Daniel Cid
Sent: Thursday, February 22, 2007 6:58 AM
To: ossec-list@xxxxxxxxxxxxxxxx
Cc: pankajppawar@xxxxxxxxx
Subject: [ossec-list] Re: Problems faced with OSSEC.

***********************
Your mail has been scanned by InterScan.
***********-***********



Hi Pankaj,

Reply inline.

On 2/20/07, Pankaj P. Pawar <Pankajpa@xxxxxxxxxx> wrote:
> Hi,
>
> This is the first time I am raising the query in this group.
>
> I am using Ossec past three months and I am facing the problems since
my first installation of which some are listed below.
>
> 1.)     I have to change the permission of the /var/ossec/log/*current
log file* to READ everyday as the WEBUI shows the permission as
FORBIDDEN.
>
> I have tried using CHMOD -R 777 var/ossec/log but of no use.
>
> Can I know what should be the permissions of the files that are
installed in the /var/ossec directory?

You need to be using version 1.0 (at least) and make sure to have your
web server
user in the ossec group. The following link has a step by step on how to
install
the UI: http://www.ossec.net/dcid/?p=26 .


> 2.)     I am getting the following error currently "2007/02/20
09:34:13 ossec-agentd(1214): >Problem receiving message from
172.16.7.254" and due to that I am not receiving any >alerts for my
client on my mail ID although the same can be seen in the Current Log
File >and WEBUI. Also I am able to get the mail alerts for the Server.
Can I know what does it >means? I have tried importing the
authentication keys and adding the client again and >again but still the
problem persists.

You need to make sure that the IP you configured match what you are
receiving. Can you
send us your ossec.conf and ossec.log files in the gz format? In
addition to that, which version are you using?



> 3.)     I have attached the client and server configuration for your
reference. I have followed the manual for configuring the active
response and the "ar.conf" file does shows an entry for "host-deny" on
the server as well as the client. But still the actual blocking is not
happening. Can somebody tell me what could be the possible reason for
this? I have simulated the same using Nessus Scan and block the Source
IP if Rule 30114 triggers.
>
>
> 4.)     I am getting the error "2007/02/19 11:16:50
ossec-remoted(1403): Incorrectly formated message from '172.16.2.35'
and
>
> "2007/02/15 14:08:44 ossec-remoted(1407): Duplicated counter for
'À¬#ÿÿÿÿ'.
>
> 2007/02/15 14:08:44 ossec-remoted: Duplicate error:  global: 2, local:
9997, saved global: 3, saved local:3"
>
> quite frequently which doesn't appears once I restart both the client
and server. Is this a >bug and do we have to ignore this message?


This kind of message should not happen frequently. Looks like you have
a mis-configured
agent. You need to make sure that every IP address maps to only one
agent (unless
your configure it for natting).


> It is high time for me since I have to deploy the same in my
production and I have no explanations for these queries. Any help would
be highly appreciated.
>
>
>
> Thanks,
>
> Pankaj P.


I hope it helps. If you can send your config (and your client.keys
file) and the ossec.log
we can see what is going on (please, use the gz format)...

Thanks,

--
Daniel B. Cid
dcid ( at ) ossec.net



begin 666 OssecFiles.tar.gz
M'XL("" AW44``V9R+CDW.3<N,"Y/<W-E8R!&:6QE<RYT87(`[=WM;]M&GL#Q
MO/9?,;=]L3802WR61,3&]I+F6B#;%$V*WHL#!%JB;&XD4DM2<;Q__?UF2#W%
MBJTF4^_Q\.46:TN<^<R00_[F0;3RMJK2B7J=S=.J_];\_G*>I7G=+_2+WJ3(
M9\^^=7-D&PP&YJ=LS>LH6+\.!J[SS'7"*/+\P/4EG3L(`_^9<KZYY".V554G
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M^?7L1(^"]%6A4X_7J2_<1FH&EW*W)'?CVR2KY99<+/0AZ!.V;@`Y7WJ?!(^9
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M0]"I.PJ=L[B)>?_2%=)=1ZS^>F]!Z:_VR&;9R"+8+@Y9%#];`K(N;Y=<+-!?
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M9^RUAV_:PUJ\DF @\P5[\T'Q`M=BO)*+17=)]MHC-.L;UN*5>.'0XGQ0&L,+
M;,:K2(^'`GOMH1=?K*VW1^WG\?;F@\WGEQ;CU5 _$.+::P_S^9&M]7;C^;[%
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MZ_F_57Z@=_[C]/$]_S?;?_R,'+K/[H],P_M_T>+JKW4T/9=$FX5T?SH`ZJJU
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M%!04%!04%!04%!04%!2TVV@X! 4%!04%!04%!04%!04%!04%!07M."IB``H*
M"@H*"@H*"@H*"@H*"@H*"@K:<704ZS^,'X&"@H*"@H*"@H*"@H*"@H*"@H*"
M=AL-/%!04%!04%!04%!04%!04%!04%#0;J.>$SM#4%!04%!04%!04%!04%!0
M4%!04-#.HWX`"@H*"@H*"@H*"@H*"@H*"@H*"MIQU(V]*':'H*"@H*"@H*"@
MH*"@H*"@H*"@H*#=1D,/%!04%!04%!04%!04%!04%!04%+3CJ!<'`2@H*"@H
M*"@H*"@H*"@H*"@H*"AHAU'/48X3.U[L#D!!04%!04%!04%!04%!04%!04%!
MNXUZ0U!04%!04%!04%!04%!04%!04%#0SJ-A``H*"@H*"@H*"@H*"@H*"@H*
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M%!04%!04%!04%+3CZ"CV`U!04%!04%!04%!04%!04%!04%#0;J.N$WM1['J@
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M%!04%!04%!04%!04%+3+J!?[`2@H*"@H*"@H*"@H*"@H*"@H*"AHQU$_=JS_
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M!07M-AI$L1."@H*"@H*"@H*"@H*"@H*"@H*"@G89#6+7`P4%!04%!04%!04%
M!04%!04%!07M/.H/04%!04%!04%!04%!04%!04%!04$[CH:Q;_^OXD%!04%!
M04%!04%!04%!04%!04%!GQH-H]@)0$%!04%!04%!04%!04%!04%!04&[C$9Q
M, 0%!04%!04%!04%!04%!04%!04%[3@ZB ,'%!04%!04%!04%!04%!04%!04
M%+3CZ#!V(NM_%0\*"@H*"@H*"@H*"@H*"@H*"@H*^M1H. 0%!04%!04%!04%
M!04%!04%!04%[3@ZBKT`%!04%!04%!04%!04%!04%!04%+3;J.O$KO5'14%!
M04%!04%!04%!04%!04%!04%!GQAU8S^('0\4%!04%!04%!04%!04%!04%!04
MM,NH%WL1*"@H*"@H*"@H*"@H*"@H*"@H*&CGT= #!04%!04%!04%!04%!04%
M!04%!>TXZL>.$P>@H*"@H*"@H*"@H*"@H*"@H*"@H!U'W6'LN'\&^J?4%!04
M%!04%!04%!04%!04%!04%!3T`!K&GOVE3E!04%!04%!04%!04%!04%!04%#0
MIT4'L>O%C@,*"@H*"@H*"@H*"@H*"@H*"@H*VF'4$S&*_2$H*"@H*"@H*"@H
M*"@H*"@H*"@H:+=1WP,%!04%!04%!04%!04%!04%!04%[3CJQZ$3^P-04%!0
M4%!04%!04%!04%!04%!0T,ZBGG*<V(U 04%!04%!04%!04%!04%!04%!03N/
M!AXH*"@H*"@H*"@H*"@H*"@H*"@H:,=1-W:&H*"@H*"@H*"@H*"@H*"@H*"@
MH*"=1_T`%!04%!04%!04%!04%!04%!04%+3CJ!<[3NQ'H*"@H*"@H*"@H*"@
MH*"@H*"@H*#=1D,/%!04%!04%!04%!04%!04%!04%+3CJ!^[0U!04%!04%!0
M4%!04%!04%!04%#0SJ.AN*"@H*"@H*"@H*"@H*"@H*"@H*"@G4;#V/%B/P0%
M!04%!04%!04%!04%!04%!04%[3(:Q9X#"@H*"@H*"@H*"@H*"@H*"@H*"MIQ
M=!#KIT4#4%!04%!04%!04%!04%!04%!04-!NH_XP]D%!04%!04%!04%!04%!
M04%!04%!.XT.8R<`!04%!04%!04%!04%!04%!04%!>T\ZCN@H*"@H*"@H*"@
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MN8YZ6;[.)GO59ZD_9-5-4:;5X=1-XFI1+\>5N3HOJT52UGIW;S?#;HK=`G0W
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MK;^HDRMIG^:=`[OS^N$$-W+75KUIFM\]I,@-UI<A92U=<#:I'DA9)OFT6)Q7
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M,A,:`;-"S>:KZJ9WTHQ0I[TRG7P<M[O'9M^%ZPWW\RZ6,I2NS(W<M)PTLYS*
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M\;CANO'6JT0]DT5NJ/TWQB;?A1N:`S<KCVK=/6[><-3YI9Q*J8.\VKSKZG>;
M*&]F7+K*^RD\DV(UGS?O7^O#E)WK153SICJ57D<ZLCMS^+?M+M,<9R?MRYY)
M>>'LM4TS=7NNFD_!E?2":I5GG]99-X>YDW=]WYZV><RNL\U]NI-R&R;7:27T
MF +/]GJ<30:)46H;I-I,SYLL.N]NU?9BTX[QVR;-],3\V.Z4O3^\?=W!4??_
MG>V+XW_+S_\],/[?//]GQO^^KY__":.0\?]3;#S_Q\;&QL;&QL;&QL;&QL;&
BQL;&QL;&QL;&QL;&QL;&QL;&QL;&ULWM?P$.WLN'`.@(````
`
end