[prev in list] [next in list] [prev in thread] [next in thread] 

List:       ossec-list
Subject:    [ossec-list] Re: OSSEC v1.5 beta1 available
From:       Roch <elrocho () gmail ! com>
Date:       2008-04-17 13:13:12
Message-ID: 94a4cf770804170613h6a99c317s361dd461ef10b379 () mail ! gmail ! com
[Download RAW message or body]


Hi Daniel,

It turns out it was a network problem that was causing the
connectivity problems. I've installed it since on other Windows 2003
systems with no problems,

Regards,

Paul

On 16/04/2008, Daniel Cid <daniel.cid@gmail.com> wrote:
>
>  Hi Roch,
>
>  Thanks for the bug report. Can you let us know how it is behaving now?
>  (after a few hours running). We had
>  some problems before with Win 2003 and I want to make sure it is stable now...
>
>  If you can send us the full agent log it would be great (I am
>  specially interest in disconnects).
>
>  Thanks for testing!
>
>
>  --
>  Daniel B. Cid
>  dcid ( at ) ossec.net
>
>
> On Tue, Apr 15, 2008 at 10:21 AM, Roch <elrocho@gmail.com> wrote:
>  >
>  >  Nevermind, it started to work after a while, after about 30 mins the
>  >  error messages went away and it connected.
>  >
>  >
>  >
>  >  On 15/04/2008, Roch <elrocho@gmail.com> wrote:
>  >  > Hi Daniel,
>  >  >
>  >  >  I installed this is my test environment. Install on Redhat EL 4 Server
>  >  >  and Agent was fine, agent checks in to server and alerts are working.
>  >  >
>  >  >  However installing the agent on Windows 2003 is causing problems. The
>  >  >  install appears fine. I add the agent back in as before to the server,
>  >  >  but the agent keeps complaining that it cant contact the server. The
>  >  >  previous version was able to contact the server no probs.
>  >  >
>  >  >  Error is:
>  >  >
>  >  >  2008/04/15 12:17:07 ossec-agent: Monitoring registry entry:
>  >  >  'HKEY_LOCAL_MACHINE\Software\Policies'.
>  >  >
>  >  >  2008/04/15 12:17:07 ossec-agent: Monitoring registry entry:
>  >  >  'HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion'.
>  >  >
>  >  >  2008/04/15 12:17:07 ossec-agent: Monitoring registry entry:
>  >  >  'HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion'.
>  >  >
>  >  >  2008/04/15 12:17:07 ossec-agent: Monitoring registry entry:
>  >  >  'HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer'.
>  >  >
>  >  >  2008/04/15 12:17:07 ossec-agent: Monitoring registry entry:
>  >  >  'HKEY_LOCAL_MACHINE\Software\Classes'.
>  >  >
>  >  >  2008/04/15 12:17:07 ossec-agent: Monitoring registry entry:
>  >  >  'HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control'.
>  >  >
>  >  >  2008/04/15 12:17:07 ossec-agent: Monitoring registry entry:
>  >  >  'HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services'.
>  >  >
>  >  >  2008/04/15 12:17:07 ossec-agent: Monitoring registry entry:
>  >  >  'HKEY_LOCAL_MACHINE\Security'.
>  >  >
>  >  >  2008/04/15 12:17:07 ossec-agent: Monitoring directory: 'C:\WINDOWS/system32'.
>  >  >
>  >  >  2008/04/15 12:17:07 ossec-agent: INFO: Started (pid: 4272).
>  >  >
>  >  >  2008/04/15 12:17:28 ossec-agent(4101): WARN: Waiting for server reply
>  >  >  (not started). Tried: 'x.x.x.x'.
>  >  >
>  >  >  2008/04/15 12:17:49 ossec-agent(4101): WARN: Waiting for server reply
>  >  >  (not started). Tried: 'x.x.x.x'.
>  >  >
>  >  >  2008/04/15 12:18:10 ossec-agent(4101): WARN: Waiting for server reply
>  >  >  (not started). Tried: 'x.x.x.x'.
>  >  >
>  >  >  2008/04/15 12:18:31 ossec-agent(4101): WARN: Waiting for server reply
>  >  >  (not started). Tried: 'x.x.x.x'.
>  >  >
>  >  >  2008/04/15 12:18:52 ossec-agent(4101): WARN: Waiting for server reply
>  >  >  (not started). Tried: 'x.x.x.x'.
>  >  >
>  >  >  2008/04/15 12:19:13 ossec-agent(4101): WARN: Waiting for server reply
>  >  >  (not started). Tried: 'x.x.x.x'.
>  >  >
>  >  >  2008/04/15 12:19:34 ossec-agent(4101): WARN: Waiting for server reply
>  >  >  (not started). Tried: 'x.x.x.x'.
>  >  >
>  >  >  2008/04/15 12:19:55 ossec-agent(4101): WARN: Waiting for server reply
>  >  >  (not started). Tried: 'x.x.x.x'.
>  >  >
>  >  >  2008/04/15 12:20:16 ossec-agent(4101): WARN: Waiting for server reply
>  >  >  (not started). Tried: 'x.x.x.x'.
>  >  >
>  >  >  2008/04/15 12:20:37 ossec-agent(4101): WARN: Waiting for server reply
>  >  >  (not started). Tried: 'x.x.x.x'.
>  >  >
>  >  >  2008/04/15 12:20:44 ossec-agent: WARN: Process locked. Waiting for permission...
>  >  >
>  >  >  2008/04/15 12:20:58 ossec-agent(4101): WARN: Waiting for server reply
>  >  >  (not started). Tried: 'x.x.x.x'.
>  >  >
>  >  >  This repeats over and over and never connects. I have restarted both
>  >  >  agent and server a few times.
>  >  >
>  >  >  Regards
>  >  >
>  >  >
>  >  >  Roch
>  >  >
>  >  >
>  >  >  On 13/04/2008, Daniel Cid <daniel.cid@gmail.com> wrote:
>  >  >  >
>  >  >  >  For those interested in helping with the beta testing (also, if you
>  >  >  >  reported a bug, it should be fixed in there):
>  >  >  >
>  >  >  >  From: http://www.ossec.net/dcid/?p=128
>  >  >  >
>  >  >  >
>  >  >  >  "
>  >  >  >  Version 1.5 is very close and we need some help beta testing it. As I
>  >  >  >  always say, trying out our beta releases is a simple and very
>  >  >  >  effective way to help the project.
>  >  >  >
>  >  >  >  How can you test it?
>  >  >  >  We created an entry in our Wiki (
>  >  >  >  http://www.ossec.net/wiki/index.php/Dev:BetaTesting )  with all the
>  >  >  >  information necessary regarding beta testing. The test sets are very
>  >  >  >  simple, but I plan to improve it as we progress. Download information,
>  >  >  >  what to test and everything else is there.
>  >  >  >
>  >  >  >  What are the new features?
>  >  >  >  Check the Wiki page as well.
>  >  >  >
>  >  >  >  Any help is very appreciated.
>  >  >  >  "
>  >  >  >
>  >  >  >
>  >  >  >  thanks,
>  >  >  >
>  >  >  >
>  >  >  >
>  >  >  >  --
>  >  >  >  Daniel B. Cid
>  >  >  >  dcid ( at ) ossec.net
>  >  >  >
>  >  >
>  >
>
[prev in list] [next in list] [prev in thread] [next in thread]