Re: [ossec-list] "Unknown problem" with Kaspersky agent?

[dan (ddp)]

On Tue, Nov 13, 2012 at 10:01 AM, brandall <bran...@paywire.com> wrote:
> Hello,
>
> I have started receiving a heavy volume of these messages lately.
> "klnagent" is part of Kaspersky. Oddly enough, there is nothing in the
> error logs for Kaspersky related to these instances. Thoughts?
>
> Received From: host8->/var/log/messages
> Rule: 1002 fired (level 2) -> "Unknown problem somewhere in the system."
> Portion of the log(s):
>
> Nov 13 09:55:22 host8 klnagent[30481]: EventsProcessorProxy: #1255 (0)
> Transport level error while connecting to http://192.168.0.6:13000: general
> error 0x4E7<5xppaALmx6aaJAgipsaZj0>Error information: 1255/0 (Error was
> occured in transport layer. Error code - '0'. Location -
> 'http://192.168.0.6:13000'),
> /tmp/automate-temp.1305879517.7387/nagent/transport/trf/socket/transfersocket.cpp,
> 447
>
> Bryan

If it's not something you're worried about, filter it out. 1002 is
triggered by the word "error" in the log message