[ossec-list] Re: Windows client communication issue

["Ry Mills" <rmills@xxxxxxxxxxxxxx>]

Sure do. Actually I rebooted the Ubuntu server and now my XP client
works but my W2K Server does not. I am still seeing the following log on
the W2K client....

2007/10/15 14:09:20 ossec-agent(4101): Waiting for server reply (not
started).

 
Ry Mills
Network Administrator
312.819.5943
rmills@xxxxxxxxxxxxxx
 

-----Original Message-----
From: ossec-list@xxxxxxxxxxxxxxxx [mailto:ossec-list@xxxxxxxxxxxxxxxx]
On Behalf Of McClinton, Rick
Sent: Monday, October 15, 2007 12:04 PM
To: ossec-list@xxxxxxxxxxxxxxxx
Subject: [ossec-list] Re: Windows client communication issue



From: ossec-list@xxxxxxxxxxxxxxxx [mailto:ossec-list@xxxxxxxxxxxxxxxx]
On Behalf Of Ry Mills
Sent: Monday, October 15, 2007 10:20 AM
To: ossec-list@xxxxxxxxx
Subject: [ossec-list] Windows client communication issue
Importance: Low

My server is setup on Ubuntu. I have 2 Windows XP PC's and 1 W2K server
setup with the Windows client. The first PC I setup works fine. I then
setup the W2K Server and the other XP server and get the Waiting for
server reply response.. All of these systems are on our LAN which
doesn't go through a firewall and firewall is not active on the XP PC's.
Any ideas on what might be causing this? At the very bottom is the
server log pertaining to these two clients. Any ideas on what is going
on?

Server Log

Ossec-remoted(1403) : Incorrectly formatted message from IP (This is
from my Windows 2000 Client)

Ossec-remoted(1213) : Message from IP not allowed (This is from my XP
client). As a reminder my XP clients do not run Windows firewall and
there is no firewall between client/server.

Any help would be appreciated.
Thanks.
________________________________________


If you run "/var/ossec/bin/list_agents -a" on the server, do you see a
list of all 3 agents and their correct IP addresses?

Thanks
Rick