From OSSEC Wiki

Jump to: navigation, search

What does "1403 - Incorrectly formated message" means?

It means that the server (or agent) wasn't able to decrypt the message from the other side of the connection.
More information and steps to fix at Errors:AgentCommunication.


The main reasons for this to happen are:

  • Wrong authentication keys configured (you imported a key from a different agent).
  • The IP address you configured the agent is different from what the server is seeing.


How to fix it:

  • Check if you imported the right authentication keys into the agent.
  • Check if the IP address is correctly.
  • You can also try to remove the agent (using manage_agents), add it back again and re-import the keys into the agent. Make sure to restart the server (first) and then the agent after that.


More information on the following wiki entry: Errors:AgentCommunication.

Retrieved from "http://ossec.net/wiki/Errors:1403"
Views
Personal tools