[ossec-list] Re: ossec-.13 agent stopping by itself on CentOS 5 64-bit

["Daniel Cid" <daniel.cid@xxxxxxxxx>]

Hi Peter,

I have ossec running on 64-bit systems without any problem (both Linux
and OpenBSD).
Is there any errors on your server log?

The following links may help:
http://www.ossec.net/wiki/index.php/Errors:AgentCommunication
http://www.ossec.net/wiki/index.php/Errors:1403

Btw, if that doesn't work, try our beta for the v1.4 to see if the
problem persists...

http://www.ossec.net/files/snapshots/ossec-hids-071016.tar.gz

Thanks,

--
Daniel B. Cid
dcid ( at ) ossec.net


On 10/16/07, Peter M. Abraham <peter.m.abraham@xxxxxxxxx> wrote:
>
> Greetings:
>
> 2007/10/16 09:02:44 ossec-agentd: Started (pid: 7137).
> 2007/10/16 09:02:44 ossec-agentd: Connecting to server ([ossec server
> ip]:1514).
> 2007/10/16 09:02:46 ossec-syscheckd: Started (pid: 7145).
> 2007/10/16 09:02:46 ossec-rootcheck: Started (pid: 7145).
> 2007/10/16 09:02:50 ossec-logcollector(1950): Analyzing file: '/var/
> log/messages'.
> 2007/10/16 09:02:50 ossec-logcollector(1950): Analyzing file: '/var/
> log/secure'.
> 2007/10/16 09:02:50 ossec-logcollector(1950): Analyzing file: '/var/
> log/maillog'.
> 2007/10/16 09:02:50 ossec-logcollector(1950): Analyzing file: '/
> hsphere/local/var/httpd/logs/error_log'.
> 2007/10/16 09:02:50 ossec-logcollector(1950): Analyzing file: '/
> hsphere/local/var/httpd/logs/access_log'.
> 2007/10/16 09:02:50 ossec-logcollector: Started (pid: 7141).
> 2007/10/16 09:02:59 ossec-agentd(4101): Waiting for server reply (not
> started).
> 2007/10/16 09:03:02 ossec-logcollector: Process locked. Waiting for
> permission...
> 2007/10/16 09:03:15 ossec-agentd(4101): Waiting for server reply (not
> started).
> 2007/10/16 09:03:46 ossec-agentd(4101): Waiting for server reply (not
> started).
> 2007/10/16 09:04:32 ossec-agentd(4101): Waiting for server reply (not
> started).
>
> Then it fails.
>
> The ossec server is running ok.
>
> We have a similar problem with Windows 2003 64-bit edition.
>
> Please advise how we can get ossec to work on 64-bit operating
> systems.
>
> Thank you.
>
>