Re: Agent runtime errors

Dominique Karg <dkossim.net> on Thursday, February 22,
2007 at 12:52 AM
-0700 wrote:
>I think you've got something wrong inside your
/etc/ossim/agent/ 
>config.xml, at line 88

Ah, I saw the problem. I had commented out using some of the
agent plugins
because they were installing but erroring out when trying to
run the
agent. So I had commented out the plugin, but only in one
place and it was
being referenced further down in the config file. Sorry,
should've checked
for that first.

Next problem: The agent seems to be running fine now, no
console errors
reported when executing the agent. I'm back into the server
admin console
and gone under Monitors->Sensors and it reports: socket
error: Is OSSIM
server running at localhost:40001? There aren't any sensors
connected to
OSSIM server. I've done a port scan on the server and it
shows 40001 open
as well as 3306 for MySQL. 

Is my OSSIM server misconfigured?



Gene Anderson
Computer Technician, Microsoft Certified Professional
Pembina Hills Regional Division No.7
Phone: (780) 674-8535 ext 6860
email: gandersonphrd.ab.ca

"Passwords are like bubble gum, strongest when fresh,
should never be
used by groups and create a sticky mess when left laying
around"

-anon



------------------------------------------------------------
-------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the
chance to share your
opinions on IT & business topics through brief
surveys-and earn cash
http://www.techsay.com/default.
php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Os-sim-support mailing list
Os-sim-supportlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/os-sim-s
upport

I'd check two things:

- You can let the server listen on 0.0.0.0 or on a specific
ip address
within config.xml. In this latter case the server doesn't
listen on
127.0.0.1 so "localhost" would refuse the
connection. Change it to
0.0.0.0 if unsure:

  <server port="40001"
name="serverUP" ip="0.0.0.0"/>

- Configuration -> Main (server_address). Is the server
running on
"localhost" from the httpd's point of view ?

Greetings,

Dominique

On 2/22/07, Gene Anderson <gandersonphrd.ab.ca> wrote:
> Dominique Karg <dkossim.net> on Thursday,
February 22, 2007 at 12:52 AM
> -0700 wrote:
> >I think you've got something wrong inside your
/etc/ossim/agent/
> >config.xml, at line 88
>
> Ah, I saw the problem. I had commented out using some
of the agent plugins
> because they were installing but erroring out when
trying to run the
> agent. So I had commented out the plugin, but only in
one place and it was
> being referenced further down in the config file.
Sorry, should've checked
> for that first.
>
> Next problem: The agent seems to be running fine now,
no console errors
> reported when executing the agent. I'm back into the
server admin console
> and gone under Monitors->Sensors and it reports:
socket error: Is OSSIM
> server running at localhost:40001? There aren't any
sensors connected to
> OSSIM server. I've done a port scan on the server and
it shows 40001 open
> as well as 3306 for MySQL.
>
> Is my OSSIM server misconfigured?
>
>
>
> Gene Anderson
> Computer Technician, Microsoft Certified Professional
> Pembina Hills Regional Division No.7
> Phone: (780) 674-8535 ext 6860
> email: gandersonphrd.ab.ca
>
> "Passwords are like bubble gum, strongest when
fresh, should never be
> used by groups and create a sticky mess when left
laying around"
>
> -anon
>
>
>

------------------------------------------------------------
-------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the
chance to share your
opinions on IT & business topics through brief
surveys-and earn cash
http://www.techsay.com/default.
php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Os-sim-support mailing list
Os-sim-supportlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/os-sim-s
upport