Discussion:
[ossec-list] All the agents is not connected | Port 1514 is not listening
Carlos Islas
2018-10-29 22:27:16 UTC
Permalink
Hello good aftenoon,

I have an issue so strange, all my agents is not reporting. When i saw the
status of my ports i cannot see the port 1514

****@TMCVPLMT01:/var/ossec/bin# nmap localhost*

*Starting Nmap 7.40 ( https://nmap.org ) at 2018-10-29 16:16 CST*
*Nmap scan report for localhost (127.0.0.1)*
*Host is up (0.0000030s latency).*
*Other addresses for localhost (not scanned): ::1*
*Not shown: 999 closed ports*
*PORT STATE SERVICE*
*22/tcp open ssh*

*Nmap done: 1 IP address (1 host up) scanned in 1.72 seconds*

If restart the the process ossec-remoted that happens in ossec:

*2018/10/29 16:19:28 ossec-remoted(1206): ERROR: Unable to Bind port '1514'*

I think that the problem is about the port because is not open or
listening... =S

*udp6 0 0 :::1514 :::*
3029/ossec-remoted*

Somebody have an idea? what can i do?

Thank you

Regards
--
---
You received this message because you are subscribed to the Google Groups "ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+***@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
dan (ddp)
2018-10-30 12:07:10 UTC
Permalink
Post by Carlos Islas
Hello good aftenoon,
I have an issue so strange, all my agents is not reporting. When i saw the status of my ports i cannot see the port 1514
Starting Nmap 7.40 ( https://nmap.org ) at 2018-10-29 16:16 CST
Nmap scan report for localhost (127.0.0.1)
Host is up (0.0000030s latency).
Other addresses for localhost (not scanned): ::1
Not shown: 999 closed ports
PORT STATE SERVICE
22/tcp open ssh
Nmap done: 1 IP address (1 host up) scanned in 1.72 seconds
2018/10/29 16:19:28 ossec-remoted(1206): ERROR: Unable to Bind port '1514'
I think that the problem is about the port because is not open or listening... =S
udp6 0 0 :::1514 :::* 3029/ossec-remoted
It looks like it's listening.
Have the agents ever successfully connected?
Is there a firewall blocking the traffic?
Post by Carlos Islas
Somebody have an idea? what can i do?
Thank you
Regards
--
---
You received this message because you are subscribed to the Google Groups "ossec-list" group.
For more options, visit https://groups.google.com/d/optout.
--
---
You received this message because you are subscribed to the Google Groups "ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+***@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
Loading...