ossec-agent: Error waiting mutex (timeout)

[Mandy]

ossec-agent: Error waiting mutex (timeout)

I'm seeing this error about every two minutes in the agent logs. Port
1514 is open and the agent can ping the server just fine. I've tried
to do some research, but have found nothing. Does anyone know what I
should be checking to solve this problem?

[Joshua Gimer]

What does strace show if you attach to the agent process?

strace -p "PID of Agent" -s 100

--
Thx
Joshua Gimer

[Tony Fischer]

For more background information...
We're running the agent on a Windows XP machine.
The manager is an Ubuntu 8.04 LTS machine.
The agent and the manager are connecting through a VPN tunnel that has
no restrictions placed on it in regards to traffic flow.
The agent's ossec.conf file is default from a 2.2 installation. The
manager is running a bone stock configuration as well.
We're not seeing any signs that the VPN connection is dropping on
either the manager or the agent.
We're working on getting StraceNT on the XP box so that we can provide
the requested information.

--
Tony

[Mandy]

Please see the windows stack below. We didn't see this problem for a
while. Now it appears to be happening again. Thanks in advance for
the help.

[T1804] GetFileType(ad4, 455d91, 2, 0, ...) = 1
[T1804] LeaveCriticalSection(3e2028, f0ccd0, 77c2f613, 7, ...) = 0
[T1804] LeaveCriticalSection(3e6900, f0cd04, 77c3b967, 17, ...) = 0
[T1804] EnterCriticalSection(3e6900, 77c5fd60, f0cd08, 77c3b900, ...)
= 0
[T1804] HeapAlloc(3e0000, 0, 1000, 77c5fd60, ...) = 9e3710
[T1804] EnterCriticalSection(3e2028, 77c62440, fc, 7, ...) = 0
[T1804] SetFilePointer(ad4, 0, 0, 2, ...) = 10d2a6
[T1804] LeaveCriticalSection(3e2028, f0ca48, 77c2f03d, 7, ...) = 0
[T1804] LeaveCriticalSection(3e6900, f0cd04, 77c3b967, 17, ...) = 0
[T1804] EnterCriticalSection(3e6900, 77c5fd60, f0cd18, 77c3b900, ...)
= 0
[T1804] LeaveCriticalSection(3e6900, f0cd14, 77c3b967, 17, ...) = 0
[T1804] EnterCriticalSection(3e6900, 1a, f0cd20, 77c3b900, ...) = 0
[T1804] LeaveCriticalSection(3e6900, f0cd1c, 77c3b967, 17, ...) = 0
[T1804] EnterCriticalSection(3e6900, 0, f0cd20, 77c3b900, ...) = 0
[T1804] EnterCriticalSection(3e2028, 77c62440, fc, 7, ...) = 0
[T1804] SetFilePointer(ad4, 0, f0c868, 2, ...) = 10d2a6
[T1804] WriteFile(ad4, f0c8ac, 42, f0c890, ...) = 1
[T1804] LeaveCriticalSection(3e2028, f0ccf0, 77c30390, 7, ...) = 0
[T1804] LeaveCriticalSection(3e6900, f0cd1c, 77c3b967, 17, ...) = 0
[T1804] EnterCriticalSection(3e6900, 77c5fd60, f0cd20, 77c3b900, ...)
= 0
[T1804] HeapFree(3e0000, 0, 9e3710, 0, ...) = 1
[T1804] EnterCriticalSection(3e2028, 77c62440, fc, 7, ...) = 0
[T1804] CloseHandle(ad4, 77c62440, fc, f0cd04, ...) = 1
[T1804] LeaveCriticalSection(3e2028, f0cd04, 77c2d154, 7, ...) = 0
[T1804] LeaveCriticalSection(3e6900, f0cd1c, 77c3b967, 17, ...) = 0
[T1804] EnterCriticalSection(77c61b90, 77c5fcc0, f0cd08,
77c3b900, ...) = 0
[T1804] LeaveCriticalSection(77c61b90, f0cd04, 77c3b967, 12, ...) = 0
[T1804] EnterCriticalSection(77c61b90, 77c5fcc0, f0cd18,
77c3b900, ...) = 0
[T1804] LeaveCriticalSection(77c61b90, f0cd14, 77c3b967, 12, ...) = 0
[T1804] EnterCriticalSection(77c61b90, 1a, f0cd20, 77c3b900, ...) = 0
[T1804] LeaveCriticalSection(77c61b90, f0cd1c, 77c3b967, 12, ...) = 0
[T1804] Sleep(1388, 45f8f5, 1f27f8a3, fa034f3e, ...) = 0
[T1804] WaitForSingleObject(ac, 186a0, 1f27f8a3, fa034f3e, ...) = 102
[T1804] GetSystemTimeAsFileTime(f0cd4c, b7, b7, f0ce94, ...) = 1ca6e26
[T1804] GetLastError(630065, 4b0dbd8f, 77c4aa6d, 630065, ...) = b7
[T1804] TlsGetValue(3, 630065, 4b0dbd8f, 77c4aa6d, ...) = 3e6158
[T1804] SetLastError(b7, 630065, 4b0dbd8f, 77c4aa6d, ...) = 7ffdc000
[T1804] EnterCriticalSection(77c61a70, 61002d, f0cd0c, 77c42db6, ...)
= 0
[T1804] EnterCriticalSection(3e6900, 7, f0ccd0, 77c3b92a, ...) = 0
[T1804] LeaveCriticalSection(77c61a70, f0cd0c, 77c42ebc, 1, ...) = 0
[T1804] EnterCriticalSection(3e36e8, 80, f0cc54, 77c2e584, ...) = 0
[T1804] EnterCriticalSection(3e2028, 100, 80, 3, ...) = 0
[T1804] LeaveCriticalSection(3e36e8, f0cc54, 77c2e6a5, b, ...) = 0
[T1804] CreateFileA(f0cd78, 40000000, 3, f0cc68, ...) = ad4
[T1804] GetFileType(ad4, 455d91, 2, 0, ...) = 1
[T1804] LeaveCriticalSection(3e2028, f0ccd0, 77c2f613, 7, ...) = 0
[T1804] LeaveCriticalSection(3e6900, f0cd04, 77c3b967, 17, ...) = 0
[T1804] EnterCriticalSection(3e6900, 77c5fd60, f0cd08, 77c3b900, ...)
= 0
[T1804] HeapAlloc(3e0000, 0, 1000, 77c5fd60, ...) = 9e3710
[T1804] EnterCriticalSection(3e2028, 77c62440, fc, 7, ...) = 0
[T1804] SetFilePointer(ad4, 0, 0, 2, ...) = 10d2e8
[T1804] LeaveCriticalSection(3e2028, f0ca48, 77c2f03d, 7, ...) = 0
[T1804] LeaveCriticalSection(3e6900, f0cd04, 77c3b967, 17, ...) = 0
[T1804] EnterCriticalSection(3e6900, 77c5fd60, f0cd18, 77c3b900, ...)
= 0
[T1804] LeaveCriticalSection(3e6900, f0cd14, 77c3b967, 17, ...) = 0
[T1804] EnterCriticalSection(3e6900, 1c, f0cd20, 77c3b900, ...) = 0
[T1804] LeaveCriticalSection(3e6900, f0cd1c, 77c3b967, 17, ...) = 0
[T1804] EnterCriticalSection(3e6900, 0, f0cd20, 77c3b900, ...) = 0
[T1804] EnterCriticalSection(3e2028, 77c62440, fc, 7, ...) = 0
[T1804] SetFilePointer(ad4, 0, f0c868, 2, ...) = 10d2e8
[T1804] WriteFile(ad4, f0c8ac, 42, f0c890, ...) = 1
[T1804] LeaveCriticalSection(3e2028, f0ccf0, 77c30390, 7, ...) = 0
[T1804] LeaveCriticalSection(3e6900, f0cd1c, 77c3b967, 17, ...) = 0
[T1804] EnterCriticalSection(3e6900, 77c5fd60, f0cd20, 77c3b900, ...)
= 0
[T1804] HeapFree(3e0000, 0, 9e3710, 0, ...) = 1
[T1804] EnterCriticalSection(3e2028, 77c62440, fc, 7, ...) = 0
[T1804] CloseHandle(ad4, 77c62440, fc, f0cd04, ...) = 1
[T1804] LeaveCriticalSection(3e2028, f0cd04, 77c2d154, 7, ...) = 0
[T1804] LeaveCriticalSection(3e6900, f0cd1c, 77c3b967, 17, ...) = 0
[T1804] EnterCriticalSection(77c61b90, 77c5fcc0, f0cd08,
77c3b900, ...) = 0
[T1804] LeaveCriticalSection(77c61b90, f0cd04, 77c3b967, 12, ...) = 0
[T1804] EnterCriticalSection(77c61b90, 77c5fcc0, f0cd18,
77c3b900, ...) = 0
[T1804] LeaveCriticalSection(77c61b90, f0cd14, 77c3b967, 12, ...) = 0
[T1804] EnterCriticalSection(77c61b90, 1c, f0cd20, 77c3b900, ...) = 0
[T1804] LeaveCriticalSection(77c61b90, f0cd1c, 77c3b967, 12, ...) = 0
[T1804] Sleep(1388, 45f8f5, 1f27f8a3, fa034f3e, ...) = 0
[T1804] WaitForSingleObject(ac, 186a0, 1f27f8a3, fa034f3e, ...) = 102
[T1804] GetSystemTimeAsFileTime(f0cd4c, b7, b7, f0ce94, ...) = 1ca6e27
[T1804] GetLastError(630065, 4b0dbdf8, 77c4aa6d, 630065, ...) = b7
[T1804] TlsGetValue(3, 630065, 4b0dbdf8, 77c4aa6d, ...) = 3e6158
[T1804] SetLastError(b7, 630065, 4b0dbdf8, 77c4aa6d, ...) = 7ffdc000
[T1804] EnterCriticalSection(77c61a70, 61002d, f0cd0c, 77c42db6, ...)
= 0
[T1804] EnterCriticalSection(3e6900, 7, f0ccd0, 77c3b92a, ...) = 0
[T1804] LeaveCriticalSection(77c61a70, f0cd0c, 77c42ebc, 1, ...) = 0
[T1804] EnterCriticalSection(3e36e8, 80, f0cc54, 77c2e584, ...) = 0
[T1804] EnterCriticalSection(3e2028, 100, 80, 3, ...) = 0
[T1804] LeaveCriticalSection(3e36e8, f0cc54, 77c2e6a5, b, ...) = 0
[T1804] CreateFileA(f0cd78, 40000000, 3, f0cc68, ...) = ad4
[T1804] GetFileType(ad4, 455d91, 2, 0, ...) = 1
[T1804] LeaveCriticalSection(3e2028, f0ccd0, 77c2f613, 7, ...) = 0
[T1804] LeaveCriticalSection(3e6900, f0cd04, 77c3b967, 17, ...) = 0
[T1804] EnterCriticalSection(3e6900, 77c5fd60, f0cd08, 77c3b900, ...)
= 0
[T1804] HeapAlloc(3e0000, 0, 1000, 77c5fd60, ...) = 9e3710
[T1804] EnterCriticalSection(3e2028, 77c62440, fc, 7, ...) = 0
[T1804] SetFilePointer(ad4, 0, 0, 2, ...) = 10d32a
[T1804] LeaveCriticalSection(3e2028, f0ca48, 77c2f03d, 7, ...) = 0
[T1804] LeaveCriticalSection(3e6900, f0cd04, 77c3b967, 17, ...) = 0
[T1804] EnterCriticalSection(3e6900, 77c5fd60, f0cd18, 77c3b900, ...)
= 0
[T1804] LeaveCriticalSection(3e6900, f0cd14, 77c3b967, 17, ...) = 0
[T1804] EnterCriticalSection(3e6900, 1e, f0cd20, 77c3b900, ...) = 0
[T1804] LeaveCriticalSection(3e6900, f0cd1c, 77c3b967, 17, ...) = 0
[T1804] EnterCriticalSection(3e6900, 0, f0cd20, 77c3b900, ...) = 0
[T1804] EnterCriticalSection(3e2028, 77c62440, fc, 7, ...) = 0
[T1804] SetFilePointer(ad4, 0, f0c868, 2, ...) = 10d32a
[T1804] WriteFile(ad4, f0c8ac, 42, f0c890, ...) = 1
[T1804] LeaveCriticalSection(3e2028, f0ccf0, 77c30390, 7, ...) = 0
[T1804] LeaveCriticalSection(3e6900, f0cd1c, 77c3b967, 17, ...) = 0
[T1804] EnterCriticalSection(3e6900, 77c5fd60, f0cd20, 77c3b900, ...)
= 0
[T1804] HeapFree(3e0000, 0, 9e3710, 0, ...) = 1
[T1804] EnterCriticalSection(3e2028, 77c62440, fc, 7, ...) = 0
[T1804] CloseHandle(ad4, 77c62440, fc, f0cd04, ...) = 1
[T1804] LeaveCriticalSection(3e2028, f0cd04, 77c2d154, 7, ...) = 0
[T1804] LeaveCriticalSection(3e6900, f0cd1c, 77c3b967, 17, ...) = 0
[T1804] EnterCriticalSection(77c61b90, 77c5fcc0, f0cd08,
77c3b900, ...) = 0
[T1804] LeaveCriticalSection(77c61b90, f0cd04, 77c3b967, 12, ...) = 0
[T1804] EnterCriticalSection(77c61b90, 77c5fcc0, f0cd18,
77c3b900, ...) = 0
[T1804] LeaveCriticalSection(77c61b90, f0cd14, 77c3b967, 12, ...) = 0
[T1804] EnterCriticalSection(77c61b90, 1e, f0cd20, 77c3b900, ...) = 0
[T1804] LeaveCriticalSection(77c61b90, f0cd1c, 77c3b967, 12, ...) = 0
[T1804] Sleep(1388, 45f8f5, 1f27f8a3, fa034f3e, ...) = 0
[T1804] WaitForSingleObject(ac, 186a0, 1f27f8a3, fa034f3e, ...) = 102
[T1804] GetSystemTimeAsFileTime(f0cd4c, b7, b7, f0ce94, ...) = 1ca6e27
[T1804] GetLastError(630065, 4b0dbe61, 77c4aa6d, 630065, ...) = b7
[T1804] TlsGetValue(3, 630065, 4b0dbe61, 77c4aa6d, ...) = 3e6158
[T1804] SetLastError(b7, 630065, 4b0dbe61, 77c4aa6d, ...) = 7ffdc000
[T1804] EnterCriticalSection(77c61a70, 61002d, f0cd0c, 77c42db6, ...)
= 0
[T1804] EnterCriticalSection(3e6900, 7, f0ccd0, 77c3b92a, ...) = 0
[T1804] LeaveCriticalSection(77c61a70, f0cd0c, 77c42ebc, 1, ...) = 0
[T1804] EnterCriticalSection(3e36e8, 80, f0cc54, 77c2e584, ...) = 0
[T1804] EnterCriticalSection(3e2028, 100, 80, 3, ...) = 0
[T1804] LeaveCriticalSection(3e36e8, f0cc54, 77c2e6a5, b, ...) = 0
[T1804] CreateFileA(f0cd78, 40000000, 3, f0cc68, ...) = ad4
[T1804] GetFileType(ad4, 455d91, 2, 0, ...) = 1
[T1804] LeaveCriticalSection(3e2028, f0ccd0, 77c2f613, 7, ...) = 0
[T1804] LeaveCriticalSection(3e6900, f0cd04, 77c3b967, 17, ...) = 0
[T1804] EnterCriticalSection(3e6900, 77c5fd60, f0cd08, 77c3b900, ...)
= 0
[T1804] HeapAlloc(3e0000, 0, 1000, 77c5fd60, ...) = 9e3710
[T1804] EnterCriticalSection(3e2028, 77c62440, fc, 7, ...) = 0
[T1804] SetFilePointer(ad4, 0, 0, 2, ...) = 10d36c
[T1804] LeaveCriticalSection(3e2028, f0ca48, 77c2f03d, 7, ...) = 0
[T1804] LeaveCriticalSection(3e6900, f0cd04, 77c3b967, 17, ...) = 0
[T1804] EnterCriticalSection(3e6900, 77c5fd60, f0cd18, 77c3b900, ...)
= 0
[T1804] LeaveCriticalSection(3e6900, f0cd14, 77c3b967, 17, ...) = 0
[T1804] EnterCriticalSection(3e6900, 1f, f0cd20, 77c3b900, ...) = 0
[T1804] LeaveCriticalSection(3e6900, f0cd1c, 77c3b967, 17, ...) = 0
[T1804] EnterCriticalSection(3e6900, 0, f0cd20, 77c3b900, ...) = 0
[T1804] EnterCriticalSection(3e2028, 77c62440, fc, 7, ...) = 0
[T1804] SetFilePointer(ad4, 0, f0c868, 2, ...) = 10d36c
[T1804] WriteFile(ad4, f0c8ac, 42, f0c890, ...) = 1
[T1804] LeaveCriticalSection(3e2028, f0ccf0, 77c30390, 7, ...) = 0
[T1804] LeaveCriticalSection(3e6900, f0cd1c, 77c3b967, 17, ...) = 0
[T1804] EnterCriticalSection(3e6900, 77c5fd60, f0cd20, 77c3b900, ...)
= 0
[T1804] HeapFree(3e0000, 0, 9e3710, 0, ...) = 1
[T1804] EnterCriticalSection(3e2028, 77c62440, fc, 7, ...) = 0
[T1804] CloseHandle(ad4, 77c62440, fc, f0cd04, ...) = 1
[T1804] LeaveCriticalSection(3e2028, f0cd04, 77c2d154, 7, ...) = 0
[T1804] LeaveCriticalSection(3e6900, f0cd1c, 77c3b967, 17, ...) = 0
[T1804] EnterCriticalSection(77c61b90, 77c5fcc0, f0cd08,
77c3b900, ...) = 0
[T1804] LeaveCriticalSection(77c61b90, f0cd04, 77c3b967, 12, ...) = 0
[T1804] EnterCriticalSection(77c61b90, 77c5fcc0, f0cd18,
77c3b900, ...) = 0
[T1804] LeaveCriticalSection(77c61b90, f0cd14, 77c3b967, 12, ...) = 0
[T1804] EnterCriticalSection(77c61b90, 1f, f0cd20, 77c3b900, ...) = 0
[T1804] LeaveCriticalSection(77c61b90, f0cd1c, 77c3b967, 12, ...) = 0
[T1804] Sleep(1388, 45f8f5, 1f27f8a3, fa034f3e, ...) = 0
[T1804] WaitForSingleObject(ac, 186a0, 1f27f8a3, fa034f3e, ...) = 102
[T1804] GetSystemTimeAsFileTime(f0cd4c, b7, b7, f0ce94, ...) = 1ca6e27
[T1804] GetLastError(630065, 4b0dbeca, 77c4aa6d, 630065, ...) = b7
[T1804] TlsGetValue(3, 630065, 4b0dbeca, 77c4aa6d, ...) = 3e6158
[T1804] SetLastError(b7, 630065, 4b0dbeca, 77c4aa6d, ...) = 7ffdc000
[T1804] EnterCriticalSection(77c61a70, 61002d, f0cd0c, 77c42db6, ...)
= 0
[T1804] EnterCriticalSection(3e6900, 7, f0ccd0, 77c3b92a, ...) = 0
[T1804] LeaveCriticalSection(77c61a70, f0cd0c, 77c42ebc, 1, ...) = 0
[T1804] EnterCriticalSection(3e36e8, 80, f0cc54, 77c2e584, ...) = 0
[T1804] EnterCriticalSection(3e2028, 100, 80, 3, ...) = 0
[T1804] LeaveCriticalSection(3e36e8, f0cc54, 77c2e6a5, b, ...) = 0
[T1804] CreateFileA(f0cd78, 40000000, 3, f0cc68, ...) = ad4
[T1804] GetFileType(ad4, 455d91, 2, 0, ...) = 1
[T1804] LeaveCriticalSection(3e2028, f0ccd0, 77c2f613, 7, ...) = 0
[T1804] LeaveCriticalSection(3e6900, f0cd04, 77c3b967, 17, ...) = 0
[T1804] EnterCriticalSection(3e6900, 77c5fd60, f0cd08, 77c3b900, ...)
= 0
[T1804] HeapAlloc(3e0000, 0, 1000, 77c5fd60, ...) = 9e3710
[T1804] EnterCriticalSection(3e2028, 77c62440, fc, 7, ...) = 0
[T1804] SetFilePointer(ad4, 0, 0, 2, ...) = 10d3ae
[T1804] LeaveCriticalSection(3e2028, f0ca48, 77c2f03d, 7, ...) = 0
[T1804] LeaveCriticalSection(3e6900, f0cd04, 77c3b967, 17, ...) = 0
[T1804] EnterCriticalSection(3e6900, 77c5fd60, f0cd18, 77c3b900, ...)
= 0
[T1804] LeaveCriticalSection(3e6900, f0cd14, 77c3b967, 17, ...) = 0
[T1804] EnterCriticalSection(3e6900, 21, f0cd20, 77c3b900, ...) = 0
[T1804] LeaveCriticalSection(3e6900, f0cd1c, 77c3b967, 17, ...) = 0
[T1804] EnterCriticalSection(3e6900, 0, f0cd20, 77c3b900, ...) = 0
[T1804] EnterCriticalSection(3e2028, 77c62440, fc, 7, ...) = 0
[T1804] SetFilePointer(ad4, 0, f0c868, 2, ...) = 10d3ae
[T1804] WriteFile(ad4, f0c8ac, 42, f0c890, ...) = 1
[T1804] LeaveCriticalSection(3e2028, f0ccf0, 77c30390, 7, ...) = 0
[T1804] LeaveCriticalSection(3e6900, f0cd1c, 77c3b967, 17, ...) = 0
[T1804] EnterCriticalSection(3e6900, 77c5fd60, f0cd20, 77c3b900, ...)
= 0
[T1804] HeapFree(3e0000, 0, 9e3710, 0, ...) = 1
[T1804] EnterCriticalSection(3e2028, 77c62440, fc, 7, ...) = 0
[T1804] CloseHandle(ad4, 77c62440, fc, f0cd04, ...) = 1
[T1804] LeaveCriticalSection(3e2028, f0cd04, 77c2d154, 7, ...) = 0
[T1804] LeaveCriticalSection(3e6900, f0cd1c, 77c3b967, 17, ...) = 0
[T1804] EnterCriticalSection(77c61b90, 77c5fcc0, f0cd08,
77c3b900, ...) = 0
[T1804] LeaveCriticalSection(77c61b90, f0cd04, 77c3b967, 12, ...) = 0
[T1804] EnterCriticalSection(77c61b90, 77c5fcc0, f0cd18,
77c3b900, ...) = 0
[T1804] LeaveCriticalSection(77c61b90, f0cd14, 77c3b967, 12, ...) = 0
[T1804] EnterCriticalSection(77c61b90, 21, f0cd20, 77c3b900, ...) = 0
[T1804] LeaveCriticalSection(77c61b90, f0cd1c, 77c3b967, 12, ...) = 0
[T1804] Sleep(1388, 45f8f5, 1f27f8a3, fa034f3e, ...) = 0
[T1804] WaitForSingleObject(ac, 186a0, 1f27f8a3, fa034f3e, ...) = 102
[T1804] GetSystemTimeAsFileTime(f0cd4c, b7, b7, f0ce94, ...) = 1ca6e27
[T1804] GetLastError(630065, 4b0dbf33, 77c4aa6d, 630065, ...) = b7
[T1804] TlsGetValue(3, 630065, 4b0dbf33, 77c4aa6d, ...) = 3e6158
[T1804] SetLastError(b7, 630065, 4b0dbf33, 77c4aa6d, ...) = 7ffdc000
[T1804] EnterCriticalSection(77c61a70, 61002d, f0cd0c, 77c42db6, ...)
= 0
[T1804] EnterCriticalSection(3e6900, 7, f0ccd0, 77c3b92a, ...) = 0
[T1804] LeaveCriticalSection(77c61a70, f0cd0c, 77c42ebc, 1, ...) = 0
[T1804] EnterCriticalSection(3e36e8, 80, f0cc54, 77c2e584, ...) = 0
[T1804] EnterCriticalSection(3e2028, 100, 80, 3, ...) = 0
[T1804] LeaveCriticalSection(3e36e8, f0cc54, 77c2e6a5, b, ...) = 0
[T1804] CreateFileA(f0cd78, 40000000, 3, f0cc68, ...) = ad4
[T1804] GetFileType(ad4, 455d91, 2, 0, ...) = 1
[T1804] LeaveCriticalSection(3e2028, f0ccd0, 77c2f613, 7, ...) = 0
[T1804] LeaveCriticalSection(3e6900, f0cd04, 77c3b967, 17, ...) = 0
[T1804] EnterCriticalSection(3e6900, 77c5fd60, f0cd08, 77c3b900, ...)
= 0
[T1804] HeapAlloc(3e0000, 0, 1000, 77c5fd60, ...) = 9e3710
[T1804] EnterCriticalSection(3e2028, 77c62440, fc, 7, ...) = 0
[T1804] SetFilePointer(ad4, 0, 0, 2, ...) = 10d3f0
[T1804] LeaveCriticalSection(3e2028, f0ca48, 77c2f03d, 7, ...) = 0
[T1804] LeaveCriticalSection(3e6900, f0cd04, 77c3b967, 17, ...) = 0
[T1804] EnterCriticalSection(3e6900, 77c5fd60, f0cd18, 77c3b900, ...)
= 0
[T1804] LeaveCriticalSection(3e6900, f0cd14, 77c3b967, 17, ...) = 0
[T1804] EnterCriticalSection(3e6900, 23, f0cd20, 77c3b900, ...) = 0
[T1804] LeaveCriticalSection(3e6900, f0cd1c, 77c3b967, 17, ...) = 0
[T1804] EnterCriticalSection(3e6900, 0, f0cd20, 77c3b900, ...) = 0
[T1804] EnterCriticalSection(3e2028, 77c62440, fc, 7, ...) = 0
[T1804] SetFilePointer(ad4, 0, f0c868, 2, ...) = 10d3f0
[T1804] WriteFile(ad4, f0c8ac, 42, f0c890, ...) = 1
[T1804] LeaveCriticalSection(3e2028, f0ccf0, 77c30390, 7, ...) = 0
[T1804] LeaveCriticalSection(3e6900, f0cd1c, 77c3b967, 17, ...) = 0
[T1804] EnterCriticalSection(3e6900, 77c5fd60, f0cd20, 77c3b900, ...)
= 0
[T1804] HeapFree(3e0000, 0, 9e3710, 0, ...) = 1
[T1804] EnterCriticalSection(3e2028, 77c62440, fc, 7, ...) = 0
[T1804] CloseHandle(ad4, 77c62440, fc, f0cd04, ...) = 1
[T1804] LeaveCriticalSection(3e2028, f0cd04, 77c2d154, 7, ...) = 0
[T1804] LeaveCriticalSection(3e6900, f0cd1c, 77c3b967, 17, ...) = 0
[T1804] EnterCriticalSection(77c61b90, 77c5fcc0, f0cd08,
77c3b900, ...) = 0
[T1804] LeaveCriticalSection(77c61b90, f0cd04, 77c3b967, 12, ...) = 0
[T1804] EnterCriticalSection(77c61b90, 77c5fcc0, f0cd18,
77c3b900, ...) = 0
[T1804] LeaveCriticalSection(77c61b90, f0cd14, 77c3b967, 12, ...) = 0
[T1804] EnterCriticalSection(77c61b90, 23, f0cd20, 77c3b900, ...) = 0
[T1804] LeaveCriticalSection(77c61b90, f0cd1c, 77c3b967, 12, ...) = 0
[T1804] Sleep(1388, 45f8f5, 1f27f8a3, fa034f3e, ...) = 0
[T1804] WaitForSingleObject(ac, 186a0, 1f27f8a3, fa034f3e, ...) = 102
[T1804] GetSystemTimeAsFileTime(f0cd4c, b7, b7, f0ce94, ...) = 1ca6e28
[T1804] GetLastError(630065, 4b0dbf9c, 77c4aa6d, 630065, ...) = b7
[T1804] TlsGetValue(3, 630065, 4b0dbf9c, 77c4aa6d, ...) = 3e6158
[T1804] SetLastError(b7, 630065, 4b0dbf9c, 77c4aa6d, ...) = 7ffdc000
[T1804] EnterCriticalSection(77c61a70, 61002d, f0cd0c, 77c42db6, ...)
= 0
[T1804] EnterCriticalSection(3e6900, 7, f0ccd0, 77c3b92a, ...) = 0
[T1804] LeaveCriticalSection(77c61a70, f0cd0c, 77c42ebc, 1, ...) = 0
[T1804] EnterCriticalSection(3e36e8, 80, f0cc54, 77c2e584, ...) = 0
[T1804] EnterCriticalSection(3e2028, 100, 80, 3, ...) = 0
[T1804] LeaveCriticalSection(3e36e8, f0cc54, 77c2e6a5, b, ...) = 0
[T1804] CreateFileA(f0cd78, 40000000, 3, f0cc68, ...) = ad4
[T1804] GetFileType(ad4, 455d91, 2, 0, ...) = 1
[T1804] LeaveCriticalSection(3e2028, f0ccd0, 77c2f613, 7, ...) = 0
[T1804] LeaveCriticalSection(3e6900, f0cd04, 77c3b967, 17, ...) = 0
[T1804] EnterCriticalSection(3e6900, 77c5fd60, f0cd08, 77c3b900, ...)
= 0
[T1804] HeapAlloc(3e0000, 0, 1000, 77c5fd60, ...) = 9e3710
[T1804] EnterCriticalSection(3e2028, 77c62440, fc, 7, ...) = 0
[T1804] SetFilePointer(ad4, 0, 0, 2, ...) = 10d432
[T1804] LeaveCriticalSection(3e2028, f0ca48, 77c2f03d, 7, ...) = 0
[T1804] LeaveCriticalSection(3e6900, f0cd04, 77c3b967, 17, ...) = 0
[T1804] EnterCriticalSection(3e6900, 77c5fd60, f0cd18, 77c3b900, ...)
= 0
[T1804] LeaveCriticalSection(3e6900, f0cd14, 77c3b967, 17, ...) = 0
[T1804] EnterCriticalSection(3e6900, 25, f0cd20, 77c3b900, ...) = 0
[T1804] LeaveCriticalSection(3e6900, f0cd1c, 77c3b967, 17, ...) = 0
[T1804] EnterCriticalSection(3e6900, 0, f0cd20, 77c3b900, ...) = 0
[T1804] EnterCriticalSection(3e2028, 77c62440, fc, 7, ...) = 0
[T1804] SetFilePointer(ad4, 0, f0c868, 2, ...) = 10d432
[T1804] WriteFile(ad4, f0c8ac, 42, f0c890, ...) = 1
[T1804] LeaveCriticalSection(3e2028, f0ccf0, 77c30390, 7, ...) = 0
[T1804] LeaveCriticalSection(3e6900, f0cd1c, 77c3b967, 17, ...) = 0
[T1804] EnterCriticalSection(3e6900, 77c5fd60, f0cd20, 77c3b900, ...)
= 0
[T1804] HeapFree(3e0000, 0, 9e3710, 0, ...) = 1
[T1804] EnterCriticalSection(3e2028, 77c62440, fc, 7, ...) = 0
[T1804] CloseHandle(ad4, 77c62440, fc, f0cd04, ...) = 1
[T1804] LeaveCriticalSection(3e2028, f0cd04, 77c2d154, 7, ...) = 0
[T1804] LeaveCriticalSection(3e6900, f0cd1c, 77c3b967, 17, ...) = 0
[T1804] EnterCriticalSection(77c61b90, 77c5fcc0, f0cd08,
77c3b900, ...) = 0
[T1804] LeaveCriticalSection(77c61b90, f0cd04, 77c3b967, 12, ...) = 0
[T1804] EnterCriticalSection(77c61b90, 77c5fcc0, f0cd18,
77c3b900, ...) = 0
[T1804] LeaveCriticalSection(77c61b90, f0cd14, 77c3b967, 12, ...) = 0
[T1804] EnterCriticalSection(77c61b90, 25, f0cd20, 77c3b900, ...) = 0
[T1804] LeaveCriticalSection(77c61b90, f0cd1c, 77c3b967, 12, ...) = 0
[T1804] Sleep(1388, 45f8f5, 1f27f8a3, fa034f3e, ...) = 0
[T1804] WaitForSingleObject(ac, 186a0, 1f27f8a3, fa034f3e, ...)
Tracing of the p
rocess stopped.
[T2188] TlsGetValue(3, 0, 118fc24, 118fc30, ...) ^C

On Oct 26, 7:29 pm, Joshua Gimer <jgi...@gmail.com> wrote:
> What does strace show if you attach to the agent process?
>
> strace -p "PID of Agent" -s 100
>

> On Mon, Oct 26, 2009 at 12:16 PM, Mandy <adean...@gmail.com> wrote:
>
> > ossec-agent: Error waitingmutex(timeout)

[Tony]

Update...

When we originally setup the client, I assigned it a 4 digit ID. I
recently recalled reading that the manager can only support up to 256
agents at once, so there was really no need for me to setup anything
more than a 3 digit ID. Yesterday we uninstalled the agent from the
client box, I removed the agent from the manager, and we started over
again from scratch by reinstalling the agent, generating a new key,
and I assigned it only a 3 digit ID. We have not had one problem since
and it's been almost 24 hours now. Could assigning the client a 4
digit ID have been the problem?

--
Tony