ossec-remoted not running

[edurcht]

Dear All,

i doing installing ossec server in RHEL 6.8, but just ossec-remoted not running, i do troubleshooting with commands bellow:

#gdb /var/ossec-2.9/bin/ossec-remoted

###RESULT###

<http://www.gnu.org/software/gdb/bugs/>...

Reading symbols from /var/ossec-2.9/bin/ossec-remoted...(no debugging symbols found)...done.

(gdb) set follow-fork-mode child

(gdb) run -df

Starting program: /var/ossec-2.9/bin/ossec-remoted -df

[Thread debugging using libthread_db enabled]

2017/03/01 08:36:40 ossec-remoted: DEBUG: Starting ...

2017/03/01 08:36:40 ossec-remoted: INFO: Started (pid: 88290).

[New process 88293]

2017/03/01 08:36:40 ossec-remoted: DEBUG: Forking remoted: '1'.

2017/03/01 08:36:40 ossec-remoted(1206): ERROR: Unable to Bind port '1514'

[Thread debugging using libthread_db enabled]

2017/03/01 08:36:40 ossec-remoted: DEBUG: Forking remoted: '0'.

2017/03/01 08:36:40 ossec-remoted: Remote syslog allowed from: '0.0.0.0/0'

2017/03/01 08:36:40 ossec-remoted: Remote syslog allowed from: '0.0.0.0/0'

2017/03/01 08:36:40 ossec-remoted(1206): ERROR: Unable to Bind port '1514'

Program exited with code 01.

Missing separate debuginfos, use: debuginfo-install glibc-2.12-1.192.el6.x86_64 keyutils-libs-1.4-5.el6.x86_64 krb5-libs-1.10.3-57.el6.x86_64 libcom_err-1.41.12-22.el6.x86_64 libselinux-2.0.94-7.el6.x86_64 openssl-1.0.1e-48.el6_8.4.x86_64 zlib-1.2.3-29.el6.x86_64

(gdb) Q

Can you help me?

[Victor Fernandez]

Hi,

The most common reason is that there is another program using port 1514, you can check it by running:

netstat -pul | grep :1514

If you find a program listening to port 1514, close it before start OSSEC. If such program is ossec-remoted, kill it with:

pkill -f ossec-remoted

If the problem persists, make sure that the <remote/secure> configuration is not duplicated. There should be only one secure remote configuration like:

<remote>

  <connection>secure</connection>

  <port>1514</port>

</remote>

Hope it help.

Regards.

--

---
You received this message because you are subscribed to the Google Groups "ossec-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to ossec-dev+...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[edurcht]

Hi problem solved, chmod in client.keys and kill process zombies of remoted.

thanks