ossec-docs | OSSEC Documentation
kandi X-RAY | ossec-docs Summary
kandi X-RAY | ossec-docs Summary
OSSEC Documentation
Support
Quality
Security
License
Reuse
Top functions reviewed by kandi - BETA
Currently covering the most popular Java, JavaScript and Python libraries. See a Sample of ossec-docs
ossec-docs Key Features
ossec-docs Examples and Code Snippets
Community Discussions
Trending Discussions on ossec-docs
QUESTION
I am getting started with OSSEC and i want to configure windows agent. I have followed the documentation and this. My server is a VM ubuntu and I want to have an Windows Agent.
This is the output of active agents.
vm:/var/ossec/etc# /var/ossec/bin/list_agents -c ** No agent available.
vm:~/ossec-hids-3.2.0# tcpdump -i ens3 src 192.168.8.69
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on ens3, link-type EN10MB (Ethernet), capture size 262144 bytes
13:44:30.979244 IP 192.168.8.69.55341 > 10.0.0.4.ssh: Flags [.], ack >1445060350, win 16319, length 0
This is list of already added agents.
Available agents: ID: 003, Name: WindowsAgent, IP: 192.168.8.69
And here is my windows agent manager.
On the server side I have droped the firewall.
Maybe should I drop the firewall also on the client side? Also I am not so sure about server side IP address - but thats the output form ifconfig.
...ANSWER
Answered 2019-Oct-02 at 09:47I made a mistake assuming that ifconfig ip is the one I should be connecting. My server is on the VM, which I connect via SSH to given IP and this IP is the OSSEC server IP.
Here is the command to check whether the port 1514 is used.
tcpdump -i ens3 -nn host 192.168.8.69 and port 1514
It shows whether you are using a specific port.
Also, I advise checking ossec.log
in ossec-agent folder.
Community Discussions, Code Snippets contain sources that include Stack Exchange Network
Vulnerabilities
No vulnerabilities reported
Install ossec-docs
Support
Reuse Trending Solutions
Find, review, and download reusable Libraries, Code Snippets, Cloud APIs from over 650 million Knowledge Items
Find more librariesStay Updated
Subscribe to our newsletter for trending solutions and developer bootcamps
Share this Page