ossec-syscheckd(1224)

[Heyzoos]

Hi All,

I am trying to get the agent running on our HP-UX boxen and I have run
into a brick wall with this error.

2009/10/29 15:50:17 ossec-syscheckd: INFO: Starting syscheck database
(pre-scan).
2009/10/29 15:54:20 ossec-syscheckd: INFO: Finished creating syscheck
database (pre-scan completed).
2009/10/29 15:56:20 ossec-syscheckd: INFO: Starting syscheck scan
(forwarding database).
2009/10/29 15:56:48 ossec-syscheckd: socket busy ..
2009/10/29 15:56:58 ossec-syscheckd: socket busy ..
2009/10/29 15:56:58 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:57:07 ossec-syscheckd: socket busy ..
2009/10/29 15:57:17 ossec-syscheckd: socket busy ..
2009/10/29 15:57:17 ossec-syscheckd: socketerr (not available).
2009/10/29 15:57:17 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
...repeats forever....

Everything compiled and installed nicely with gcc (no joy with cc).
All the requisite processes are running. Can someone shine some light
on this for me.

Details:

System OS: HP-UX 11.23
OSSEC Version: 2.2

Agent control output on server.

[root@metis dcraig]# agent_control -l

OSSEC HIDS agent_control. List of available agents:
ID: 000, Name: metis (server), IP: 127.0.0.1, Active/Local
ID: 004, Name: CORES-SPARE, IP: xxx.xxx.xxx.39, Active
ID: 033, Name: EPOSPCI-xxx.xxx.xxx.129, IP: xxx.xxx.xxx.129, Active
ID: 034, Name: S002-xxx.xxx.xxx.201, IP: xxx.xxx.xxx.201, Active
ID: 035, Name: S001-xxx.xxx.xxx.200, IP: xxx.xxx.xxx.200, Active
ID: 036, Name: db00, IP: xxx.xxx.xxx.245, Active
ID: 037, Name: m87s00, IP: xxx.xxx.xxx.110, Active <---THE HP-UX
11.23 BOX

List of agentless devices:

# /var/ossec/bin/ossec-control status
ossec-logcollector is running...
ossec-syscheckd is running...
ossec-agentd is running...
ossec-execd is running...

# uname -a
HP-UX m87s00 B.11.23 U 9000/800 1076725754 unlimited-user license

# cat /etc/ossec-init.conf
DIRECTORY="/var/ossec"
VERSION="v2.2"
DATE="Thu Oct 29 13:25:52 GMT 2009"
TYPE="agent"
# DIRECTORY="/var/ossec"
# VERSION="v2.2"
# DATE="Thu Oct 29 13:25:52 GMT 2009"
# TYPE="agent"
# # cat /etc/ossec-init.conf
# DIRECTORY="/var/ossec"
# VERSION="v2.2"
# DATE="Thu Oct 29 13:25:52 GMT 2009"
# TYPE="agent"
#

# cat /var/ossec/etc/ossec.conf
<ossec_config>
<client>
<server-ip>10.99.254.31</server-ip>
</client>

<syscheck>
<!-- Frequency that syscheck is executed - default to every 22
hours -->
<frequency>79200</frequency>

<!-- Directories to check (perform all possible verifications) --
>
<directories check_all="yes">/etc,/usr/bin,/usr/sbin</directories>
<directories check_all="yes">/bin,/sbin</directories>

<!-- Files/directories to ignore -->
<ignore>/etc/mtab</ignore>
<ignore>/etc/mnttab</ignore>
<ignore>/etc/hosts.deny</ignore>
<ignore>/etc/mail/statistics</ignore>
<ignore>/etc/random-seed</ignore>
<ignore>/etc/adjtime</ignore>
<ignore>/etc/httpd/logs</ignore>
<ignore>/etc/utmpx</ignore>
<ignore>/etc/wtmpx</ignore>
<ignore>/etc/cups/certs</ignore>
<ignore>/etc/dumpdates</ignore>
<ignore>/etc/svc/volatile</ignore>

<!-- Windows files to ignore -->
<ignore>C:\WINDOWS/System32/LogFiles</ignore>
<ignore>C:\WINDOWS/Debug</ignore>
<ignore>C:\WINDOWS/WindowsUpdate.log</ignore>
<ignore>C:\WINDOWS/iis6.log</ignore>
<ignore>C:\WINDOWS/system32/wbem/Logs</ignore>
<ignore>C:\WINDOWS/system32/wbem/Repository</ignore>
<ignore>C:\WINDOWS/Prefetch</ignore>
<ignore>C:\WINDOWS/PCHEALTH/HELPCTR/DataColl</ignore>
<ignore>C:\WINDOWS/SoftwareDistribution</ignore>
<ignore>C:\WINDOWS/Temp</ignore>
<ignore>C:\WINDOWS/system32/config</ignore>
<ignore>C:\WINDOWS/system32/spool</ignore>
<ignore>C:\WINDOWS/system32/CatRoot</ignore>
</syscheck>

<rootcheck>
<rootkit_files>/var/ossec/etc/shared/rootkit_files.txt</
rootkit_files>
<rootkit_trojans>/var/ossec/etc/shared/rootkit_trojans.txt</
rootkit_trojans>
<system_audit>/var/ossec/etc/shared/system_audit_rcl.txt</
system_audit>
<system_audit>/var/ossec/etc/shared/cis_debian_linux_rcl.txt</
system_audit>
<system_audit>/var/ossec/etc/shared/cis_rhel_linux_rcl.txt</
system_audit>
<system_audit>/var/ossec/etc/shared/cis_rhel5_linux_rcl.txt</
system_audit>
</rootcheck>
<!-- Files to monitor (localfiles) -->

<localfile>
<log_format>syslog</log_format>
<location>/var/adm/syslog</location>
</localfile>

<localfile>
<log_format>syslog</log_format>
<location>/var/adm/syslog/syslog.log</location>
</localfile>
</ossec_config>

# netstat -a | grep udp
udp 0 0 m87s00.54249 10.99.254.31.1514
udp 0 0 *.2121 *.*
udp 0 0 *.2148 *.*
udp 0 0 *.135 *.*
udp 0 0 localhost.49166 localhost.49166
udp 0 0 *.* *.*

# cat /var/ossec/logs/ossec.log
2009/10/29 13:33:03 ossec-agentd(1402): ERROR: Authentication key file
'/var/ossec/etc/client.keys' not found.
2009/10/29 13:33:03 ossec-agentd(1750): ERROR: No remote connection
configured. Exiting.
2009/10/29 13:33:03 ossec-agentd(4109): ERROR: Unable to start without
auth keys. Exiting.
2009/10/29 13:36:53 ossec-execd: INFO: Started (pid: 24540).
2009/10/29 13:36:53 ossec-agentd(1410): INFO: Reading authentication
keys file.
2009/10/29 13:36:53 ossec-agentd: INFO: Started (pid: 24544).
2009/10/29 13:36:53 ossec-agentd: INFO: Server IP Address:
10.99.254.31
2009/10/29 13:36:53 ossec-agentd: INFO: Trying to connect to server
(10.99.254.31:1514).
2009/10/29 13:36:54 ossec-agentd(4102): INFO: Connected to the server
(10.99.254.31:1514).
2009/10/29 13:36:57 ossec-syscheckd: INFO: Started (pid: 24552).
2009/10/29 13:36:57 ossec-rootcheck: INFO: Started (pid: 24552).
2009/10/29 13:36:57 ossec-syscheckd: INFO: Monitoring directory: '/
etc'.
2009/10/29 13:36:57 ossec-syscheckd: INFO: Monitoring directory: '/usr/
bin'.
2009/10/29 13:36:57 ossec-syscheckd: INFO: Monitoring directory: '/usr/
sbin'.
2009/10/29 13:36:57 ossec-syscheckd: INFO: Monitoring directory: '/
bin'.
2009/10/29 13:36:57 ossec-syscheckd: INFO: Monitoring directory: '/
sbin'.
2009/10/29 13:36:59 ossec-logcollector(1950): INFO: Analyzing file: '/
var/adm/syslog'.
2009/10/29 13:36:59 ossec-logcollector(1950): INFO: Analyzing file: '/
var/adm/syslog/syslog.log'.
2009/10/29 13:36:59 ossec-logcollector: INFO: Started (pid: 24548).
2009/10/29 13:37:29 ossec-syscheckd: INFO: Starting syscheck database
(pre-scan).
2009/10/29 13:41:40 ossec-syscheckd: INFO: Finished creating syscheck
database (pre-scan completed).
2009/10/29 13:43:40 ossec-syscheckd: INFO: Starting syscheck scan
(forwarding database).
2009/10/29 13:44:07 ossec-syscheckd: socket busy ..
2009/10/29 13:44:17 ossec-syscheckd: socket busy ..
2009/10/29 13:44:17 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 13:44:26 ossec-syscheckd: socket busy ..
2009/10/29 13:44:36 ossec-syscheckd: socket busy ..
2009/10/29 13:44:36 ossec-syscheckd: socketerr (not available).
2009/10/29 13:44:36 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 13:44:45 ossec-syscheckd: socket busy ..
2009/10/29 13:44:55 ossec-syscheckd: socket busy ..
2009/10/29 13:44:55 ossec-syscheckd: socketerr (not available).
2009/10/29 13:44:55 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 13:45:04 ossec-syscheckd: socket busy ..
2009/10/29 13:45:14 ossec-syscheckd: socket busy ..
2009/10/29 13:45:14 ossec-syscheckd: socketerr (not available).
2009/10/29 13:45:14 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 13:45:23 ossec-syscheckd: socket busy ..
2009/10/29 13:45:33 ossec-syscheckd: socket busy ..
2009/10/29 13:45:33 ossec-syscheckd: socketerr (not available).
2009/10/29 13:45:33 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 13:45:42 ossec-syscheckd: socket busy ..
2009/10/29 13:45:52 ossec-syscheckd: socket busy ..
2009/10/29 13:45:52 ossec-syscheckd: socketerr (not available).
2009/10/29 13:45:52 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 13:46:01 ossec-syscheckd: socket busy ..
2009/10/29 13:46:11 ossec-syscheckd: socket busy ..
2009/10/29 13:46:13 ossec-syscheckd: socketerr (not available).
2009/10/29 13:46:13 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 13:46:22 ossec-syscheckd: socket busy ..
2009/10/29 13:46:32 ossec-syscheckd: socket busy ..
2009/10/29 13:46:32 ossec-syscheckd: socketerr (not available).
2009/10/29 13:46:32 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 13:46:41 ossec-syscheckd: socket busy ..
2009/10/29 13:46:51 ossec-syscheckd: socket busy ..
2009/10/29 13:46:51 ossec-syscheckd: socketerr (not available).
2009/10/29 13:46:51 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 13:47:00 ossec-syscheckd: socket busy ..
2009/10/29 13:47:10 ossec-syscheckd: socket busy ..
2009/10/29 13:47:10 ossec-syscheckd: socketerr (not available).
2009/10/29 13:47:10 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 13:47:19 ossec-syscheckd: socket busy ..
2009/10/29 13:47:29 ossec-syscheckd: socket busy ..
2009/10/29 13:47:29 ossec-syscheckd: socketerr (not available).
2009/10/29 13:47:29 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 13:47:38 ossec-syscheckd: socket busy ..
2009/10/29 13:47:48 ossec-syscheckd: socket busy ..
2009/10/29 13:47:48 ossec-syscheckd: socketerr (not available).
2009/10/29 13:47:48 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 13:47:57 ossec-syscheckd: socket busy ..
2009/10/29 13:48:01 ossec-logcollector: socket busy ..
2009/10/29 13:48:07 ossec-syscheckd: socket busy ..
2009/10/29 13:48:07 ossec-syscheckd: socketerr (not available).
2009/10/29 13:48:07 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 13:48:11 ossec-logcollector: socket busy ..
2009/10/29 13:48:16 ossec-syscheckd: socket busy ..
2009/10/29 13:48:26 ossec-syscheckd: socket busy ..
2009/10/29 13:48:26 ossec-syscheckd: socketerr (not available).
2009/10/29 13:48:26 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 13:48:35 ossec-syscheckd: socket busy ..
2009/10/29 13:48:45 ossec-syscheckd: socket busy ..
2009/10/29 13:48:45 ossec-syscheckd: socketerr (not available).
2009/10/29 13:48:45 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 13:48:54 ossec-syscheckd: socket busy ..
2009/10/29 13:49:04 ossec-syscheckd: socket busy ..
2009/10/29 13:49:04 ossec-syscheckd: socketerr (not available).
2009/10/29 13:49:04 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 13:49:13 ossec-syscheckd: socket busy ..
2009/10/29 13:49:23 ossec-syscheckd: socket busy ..
2009/10/29 13:49:23 ossec-syscheckd: socketerr (not available).
2009/10/29 13:49:23 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 13:49:32 ossec-syscheckd: socket busy ..
2009/10/29 13:49:42 ossec-syscheckd: socket busy ..
2009/10/29 13:49:42 ossec-syscheckd: socketerr (not available).
2009/10/29 13:49:42 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 13:49:51 ossec-syscheckd: socket busy ..
2009/10/29 13:50:01 ossec-syscheckd: socket busy ..
2009/10/29 13:50:01 ossec-syscheckd: socketerr (not available).
2009/10/29 13:50:01 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 13:50:10 ossec-syscheckd: socket busy ..
2009/10/29 13:50:21 ossec-syscheckd: socket busy ..
2009/10/29 13:50:21 ossec-syscheckd: socketerr (not available).
2009/10/29 13:50:21 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 13:50:22 ossec-logcollector: socketerr (not available).
2009/10/29 13:50:30 ossec-syscheckd: socket busy ..
2009/10/29 13:50:40 ossec-syscheckd: socket busy ..
2009/10/29 13:50:40 ossec-syscheckd: socketerr (not available).
2009/10/29 13:50:40 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 13:50:49 ossec-syscheckd: socket busy ..
2009/10/29 13:50:59 ossec-syscheckd: socket busy ..
2009/10/29 13:51:01 ossec-syscheckd: socketerr (not available).
2009/10/29 13:51:01 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 13:51:10 ossec-syscheckd: socket busy ..
2009/10/29 13:51:20 ossec-syscheckd: socket busy ..
2009/10/29 13:51:20 ossec-syscheckd: socketerr (not available).
2009/10/29 13:51:20 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 13:51:29 ossec-syscheckd: socket busy ..
2009/10/29 13:51:39 ossec-syscheckd: socket busy ..
2009/10/29 13:51:39 ossec-syscheckd: socketerr (not available).
2009/10/29 13:51:39 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 13:51:48 ossec-syscheckd: socket busy ..
2009/10/29 13:51:58 ossec-syscheckd: socket busy ..
2009/10/29 13:51:58 ossec-syscheckd: socketerr (not available).
2009/10/29 13:51:58 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 13:52:07 ossec-syscheckd: socket busy ..
2009/10/29 13:52:17 ossec-syscheckd: socket busy ..
2009/10/29 13:52:17 ossec-syscheckd: socketerr (not available).
2009/10/29 13:52:17 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 13:52:26 ossec-syscheckd: socket busy ..
2009/10/29 13:52:33 ossec-logcollector: socketerr (not available).
2009/10/29 13:52:36 ossec-syscheckd: socket busy ..
2009/10/29 13:52:36 ossec-syscheckd: socketerr (not available).
2009/10/29 13:52:36 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 13:52:45 ossec-syscheckd: socket busy ..
2009/10/29 13:52:55 ossec-syscheckd: socket busy ..
2009/10/29 13:52:55 ossec-syscheckd: socketerr (not available).
2009/10/29 13:52:55 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 13:53:04 ossec-syscheckd: socket busy ..
2009/10/29 13:53:14 ossec-syscheckd: socket busy ..
2009/10/29 13:53:14 ossec-syscheckd: socketerr (not available).
2009/10/29 13:53:14 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 13:53:23 ossec-syscheckd: socket busy ..
2009/10/29 13:53:33 ossec-syscheckd: socket busy ..
2009/10/29 13:53:33 ossec-syscheckd: socketerr (not available).
2009/10/29 13:53:33 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 13:53:42 ossec-syscheckd: socket busy ..
2009/10/29 13:53:52 ossec-syscheckd: socket busy ..
2009/10/29 13:53:52 ossec-syscheckd: socketerr (not available).
2009/10/29 13:53:52 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 13:54:01 ossec-syscheckd: socket busy ..
2009/10/29 13:54:11 ossec-syscheckd: socket busy ..
2009/10/29 13:54:11 ossec-syscheckd: socketerr (not available).
2009/10/29 13:54:11 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 13:54:20 ossec-syscheckd: socket busy ..
2009/10/29 13:54:30 ossec-syscheckd: socket busy ..
2009/10/29 13:54:30 ossec-syscheckd: socketerr (not available).
2009/10/29 13:54:30 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 13:54:39 ossec-syscheckd: socket busy ..
2009/10/29 13:54:43 ossec-logcollector: socketerr (not available).
2009/10/29 13:54:49 ossec-syscheckd: socket busy ..
2009/10/29 13:54:49 ossec-syscheckd: socketerr (not available).
2009/10/29 13:54:49 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 13:54:58 ossec-syscheckd: socket busy ..
2009/10/29 13:55:08 ossec-syscheckd: socket busy ..
2009/10/29 13:55:08 ossec-syscheckd: socketerr (not available).
2009/10/29 13:55:08 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 13:55:17 ossec-syscheckd: socket busy ..
2009/10/29 13:55:27 ossec-syscheckd: socket busy ..
2009/10/29 13:55:27 ossec-syscheckd: socketerr (not available).
2009/10/29 13:55:27 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 13:55:36 ossec-syscheckd: socket busy ..
2009/10/29 13:55:46 ossec-syscheckd: socket busy ..
2009/10/29 13:55:48 ossec-syscheckd: socketerr (not available).
2009/10/29 13:55:48 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 13:55:57 ossec-syscheckd: socket busy ..
2009/10/29 13:56:07 ossec-syscheckd: socket busy ..
2009/10/29 13:56:07 ossec-syscheckd: socketerr (not available).
2009/10/29 13:56:07 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 13:56:16 ossec-syscheckd: socket busy ..
2009/10/29 13:56:26 ossec-syscheckd: socket busy ..
2009/10/29 13:56:26 ossec-syscheckd: socketerr (not available).
2009/10/29 13:56:26 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 13:56:35 ossec-syscheckd: socket busy ..
2009/10/29 13:56:45 ossec-syscheckd: socket busy ..
2009/10/29 13:56:45 ossec-syscheckd: socketerr (not available).
2009/10/29 13:56:45 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 13:56:54 ossec-logcollector: socketerr (not available).
2009/10/29 13:56:54 ossec-syscheckd: socket busy ..
2009/10/29 13:57:04 ossec-syscheckd: socket busy ..
2009/10/29 13:57:04 ossec-syscheckd: socketerr (not available).
2009/10/29 13:57:04 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 13:57:13 ossec-syscheckd: socket busy ..
2009/10/29 13:57:23 ossec-syscheckd: socket busy ..
2009/10/29 13:57:23 ossec-syscheckd: socketerr (not available).
2009/10/29 13:57:23 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 13:57:32 ossec-syscheckd: socket busy ..
2009/10/29 13:57:42 ossec-syscheckd: socket busy ..
2009/10/29 13:57:42 ossec-syscheckd: socketerr (not available).
2009/10/29 13:57:42 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 13:57:51 ossec-syscheckd: socket busy ..
2009/10/29 13:58:01 ossec-syscheckd: socket busy ..
2009/10/29 13:58:01 ossec-syscheckd: socketerr (not available).
2009/10/29 13:58:01 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 13:58:11 ossec-syscheckd: socket busy ..
2009/10/29 13:58:21 ossec-syscheckd: socket busy ..
2009/10/29 13:58:21 ossec-syscheckd: socketerr (not available).
2009/10/29 13:58:21 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 13:58:30 ossec-syscheckd: socket busy ..
2009/10/29 13:58:40 ossec-syscheckd: socket busy ..
2009/10/29 13:58:40 ossec-syscheckd: socketerr (not available).
2009/10/29 13:58:40 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 13:58:49 ossec-syscheckd: socket busy ..
2009/10/29 13:58:59 ossec-syscheckd: socket busy ..
2009/10/29 13:58:59 ossec-syscheckd: socketerr (not available).
2009/10/29 13:58:59 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 13:59:05 ossec-logcollector: socketerr (not available).
2009/10/29 13:59:08 ossec-syscheckd: socket busy ..
2009/10/29 13:59:18 ossec-syscheckd: socket busy ..
2009/10/29 13:59:18 ossec-syscheckd: socketerr (not available).
2009/10/29 13:59:18 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 13:59:27 ossec-syscheckd: socket busy ..
2009/10/29 13:59:37 ossec-syscheckd: socket busy ..
2009/10/29 13:59:37 ossec-syscheckd: socketerr (not available).
2009/10/29 13:59:37 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 13:59:46 ossec-syscheckd: socket busy ..
2009/10/29 13:59:56 ossec-syscheckd: socket busy ..
2009/10/29 13:59:56 ossec-syscheckd: socketerr (not available).
2009/10/29 13:59:56 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:00:05 ossec-syscheckd: socket busy ..
2009/10/29 14:00:15 ossec-syscheckd: socket busy ..
2009/10/29 14:00:15 ossec-syscheckd: socketerr (not available).
2009/10/29 14:00:15 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:00:24 ossec-syscheckd: socket busy ..
2009/10/29 14:00:34 ossec-syscheckd: socket busy ..
2009/10/29 14:00:36 ossec-syscheckd: socketerr (not available).
2009/10/29 14:00:36 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:00:45 ossec-syscheckd: socket busy ..
2009/10/29 14:00:55 ossec-syscheckd: socket busy ..
2009/10/29 14:00:55 ossec-syscheckd: socketerr (not available).
2009/10/29 14:00:55 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:01:04 ossec-syscheckd: socket busy ..
2009/10/29 14:01:14 ossec-syscheckd: socket busy ..
2009/10/29 14:01:14 ossec-syscheckd: socketerr (not available).
2009/10/29 14:01:14 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:01:15 ossec-logcollector: socketerr (not available).
2009/10/29 14:01:23 ossec-syscheckd: socket busy ..
2009/10/29 14:01:33 ossec-syscheckd: socket busy ..
2009/10/29 14:01:33 ossec-syscheckd: socketerr (not available).
2009/10/29 14:01:33 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:01:42 ossec-syscheckd: socket busy ..
2009/10/29 14:01:52 ossec-syscheckd: socket busy ..
2009/10/29 14:01:52 ossec-syscheckd: socketerr (not available).
2009/10/29 14:01:52 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:02:01 ossec-syscheckd: socket busy ..
2009/10/29 14:02:11 ossec-syscheckd: socket busy ..
2009/10/29 14:02:11 ossec-syscheckd: socketerr (not available).
2009/10/29 14:02:11 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:02:20 ossec-syscheckd: socket busy ..
2009/10/29 14:02:30 ossec-syscheckd: socket busy ..
2009/10/29 14:02:30 ossec-syscheckd: socketerr (not available).
2009/10/29 14:02:30 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:02:39 ossec-syscheckd: socket busy ..
2009/10/29 14:02:49 ossec-syscheckd: socket busy ..
2009/10/29 14:02:49 ossec-syscheckd: socketerr (not available).
2009/10/29 14:02:49 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:02:58 ossec-syscheckd: socket busy ..
2009/10/29 14:03:08 ossec-syscheckd: socket busy ..
2009/10/29 14:03:08 ossec-syscheckd: socketerr (not available).
2009/10/29 14:03:08 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:03:17 ossec-syscheckd: socket busy ..
2009/10/29 14:03:26 ossec-logcollector: socketerr (not available).
2009/10/29 14:03:27 ossec-syscheckd: socket busy ..
2009/10/29 14:03:27 ossec-syscheckd: socketerr (not available).
2009/10/29 14:03:27 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:03:36 ossec-syscheckd: socket busy ..
2009/10/29 14:03:46 ossec-syscheckd: socket busy ..
2009/10/29 14:03:46 ossec-syscheckd: socketerr (not available).
2009/10/29 14:03:46 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:03:55 ossec-syscheckd: socket busy ..
2009/10/29 14:04:05 ossec-syscheckd: socket busy ..
2009/10/29 14:04:05 ossec-syscheckd: socketerr (not available).
2009/10/29 14:04:05 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:04:14 ossec-syscheckd: socket busy ..
2009/10/29 14:04:24 ossec-syscheckd: socket busy ..
2009/10/29 14:04:24 ossec-syscheckd: socketerr (not available).
2009/10/29 14:04:24 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:04:33 ossec-syscheckd: socket busy ..
2009/10/29 14:04:43 ossec-syscheckd: socket busy ..
2009/10/29 14:04:43 ossec-syscheckd: socketerr (not available).
2009/10/29 14:04:43 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:04:52 ossec-syscheckd: socket busy ..
2009/10/29 14:05:02 ossec-syscheckd: socket busy ..
2009/10/29 14:05:02 ossec-syscheckd: socketerr (not available).
2009/10/29 14:05:02 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:05:11 ossec-syscheckd: socket busy ..
2009/10/29 14:05:21 ossec-syscheckd: socket busy ..
2009/10/29 14:05:23 ossec-syscheckd: socketerr (not available).
2009/10/29 14:05:23 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:05:33 ossec-syscheckd: socket busy ..
2009/10/29 14:05:37 ossec-logcollector: socketerr (not available).
2009/10/29 14:05:37 ossec-logcollector(1224): ERROR: Error sending
message to queue.
2009/10/29 14:05:43 ossec-syscheckd: socket busy ..
2009/10/29 14:05:43 ossec-syscheckd: socketerr (not available).
2009/10/29 14:05:43 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:05:46 ossec-logcollector: socket busy ..
2009/10/29 14:05:52 ossec-syscheckd: socket busy ..
2009/10/29 14:05:56 ossec-logcollector: socket busy ..
2009/10/29 14:06:02 ossec-syscheckd: socket busy ..
2009/10/29 14:06:02 ossec-syscheckd: socketerr (not available).
2009/10/29 14:06:02 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:06:11 ossec-syscheckd: socket busy ..
2009/10/29 14:06:21 ossec-syscheckd: socket busy ..
2009/10/29 14:06:21 ossec-syscheckd: socketerr (not available).
2009/10/29 14:06:21 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:06:30 ossec-syscheckd: socket busy ..
2009/10/29 14:06:40 ossec-syscheckd: socket busy ..
2009/10/29 14:06:40 ossec-syscheckd: socketerr (not available).
2009/10/29 14:06:40 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:06:49 ossec-syscheckd: socket busy ..
2009/10/29 14:06:59 ossec-syscheckd: socket busy ..
2009/10/29 14:06:59 ossec-syscheckd: socketerr (not available).
2009/10/29 14:06:59 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:07:08 ossec-syscheckd: socket busy ..
2009/10/29 14:07:18 ossec-syscheckd: socket busy ..
2009/10/29 14:07:18 ossec-syscheckd: socketerr (not available).
2009/10/29 14:07:18 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:07:27 ossec-syscheckd: socket busy ..
2009/10/29 14:07:37 ossec-syscheckd: socket busy ..
2009/10/29 14:07:37 ossec-syscheckd: socketerr (not available).
2009/10/29 14:07:37 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:07:46 ossec-syscheckd: socket busy ..
2009/10/29 14:07:56 ossec-syscheckd: socket busy ..
2009/10/29 14:07:56 ossec-syscheckd: socketerr (not available).
2009/10/29 14:07:56 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:08:05 ossec-syscheckd: socket busy ..
2009/10/29 14:08:06 ossec-logcollector: socketerr (not available).
2009/10/29 14:08:15 ossec-syscheckd: socket busy ..
2009/10/29 14:08:15 ossec-syscheckd: socketerr (not available).
2009/10/29 14:08:15 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:08:24 ossec-syscheckd: socket busy ..
2009/10/29 14:08:34 ossec-syscheckd: socket busy ..
2009/10/29 14:08:34 ossec-syscheckd: socketerr (not available).
2009/10/29 14:08:34 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:08:43 ossec-syscheckd: socket busy ..
2009/10/29 14:08:53 ossec-syscheckd: socket busy ..
2009/10/29 14:08:53 ossec-syscheckd: socketerr (not available).
2009/10/29 14:08:53 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:09:02 ossec-syscheckd: socket busy ..
2009/10/29 14:09:12 ossec-syscheckd: socket busy ..
2009/10/29 14:09:12 ossec-syscheckd: socketerr (not available).
2009/10/29 14:09:12 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:09:21 ossec-syscheckd: socket busy ..
2009/10/29 14:09:31 ossec-syscheckd: socket busy ..
2009/10/29 14:09:31 ossec-syscheckd: socketerr (not available).
2009/10/29 14:09:31 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:09:40 ossec-syscheckd: socket busy ..
2009/10/29 14:09:50 ossec-syscheckd: socket busy ..
2009/10/29 14:09:50 ossec-syscheckd: socketerr (not available).
2009/10/29 14:09:50 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:09:59 ossec-syscheckd: socket busy ..
2009/10/29 14:10:09 ossec-syscheckd: socket busy ..
2009/10/29 14:10:11 ossec-syscheckd: socketerr (not available).
2009/10/29 14:10:11 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:10:17 ossec-logcollector: socketerr (not available).
2009/10/29 14:10:20 ossec-syscheckd: socket busy ..
2009/10/29 14:10:30 ossec-syscheckd: socket busy ..
2009/10/29 14:10:30 ossec-syscheckd: socketerr (not available).
2009/10/29 14:10:30 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:10:39 ossec-syscheckd: socket busy ..
2009/10/29 14:10:49 ossec-syscheckd: socket busy ..
2009/10/29 14:10:49 ossec-syscheckd: socketerr (not available).
2009/10/29 14:10:49 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:10:58 ossec-syscheckd: socket busy ..
2009/10/29 14:11:08 ossec-syscheckd: socket busy ..
2009/10/29 14:11:08 ossec-syscheckd: socketerr (not available).
2009/10/29 14:11:08 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:11:17 ossec-syscheckd: socket busy ..
2009/10/29 14:11:27 ossec-syscheckd: socket busy ..
2009/10/29 14:11:27 ossec-syscheckd: socketerr (not available).
2009/10/29 14:11:27 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:11:36 ossec-syscheckd: socket busy ..
2009/10/29 14:11:46 ossec-syscheckd: socket busy ..
2009/10/29 14:11:46 ossec-syscheckd: socketerr (not available).
2009/10/29 14:11:46 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:11:55 ossec-syscheckd: socket busy ..
2009/10/29 14:12:05 ossec-syscheckd: socket busy ..
2009/10/29 14:12:05 ossec-syscheckd: socketerr (not available).
2009/10/29 14:12:05 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:12:14 ossec-syscheckd: socket busy ..
2009/10/29 14:12:24 ossec-syscheckd: socket busy ..
2009/10/29 14:12:24 ossec-syscheckd: socketerr (not available).
2009/10/29 14:12:24 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:12:28 ossec-logcollector: socketerr (not available).
2009/10/29 14:12:33 ossec-syscheckd: socket busy ..
2009/10/29 14:12:43 ossec-syscheckd: socket busy ..
2009/10/29 14:12:43 ossec-syscheckd: socketerr (not available).
2009/10/29 14:12:43 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:12:52 ossec-syscheckd: socket busy ..
2009/10/29 14:13:02 ossec-syscheckd: socket busy ..
2009/10/29 14:13:02 ossec-syscheckd: socketerr (not available).
2009/10/29 14:13:02 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:13:11 ossec-syscheckd: socket busy ..
2009/10/29 14:13:21 ossec-syscheckd: socket busy ..
2009/10/29 14:13:21 ossec-syscheckd: socketerr (not available).
2009/10/29 14:13:21 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:13:31 ossec-syscheckd: socket busy ..
2009/10/29 14:13:41 ossec-syscheckd: socket busy ..
2009/10/29 14:13:41 ossec-syscheckd: socketerr (not available).
2009/10/29 14:13:41 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:13:50 ossec-syscheckd: socket busy ..
2009/10/29 14:14:00 ossec-syscheckd: socket busy ..
2009/10/29 14:14:00 ossec-syscheckd: socketerr (not available).
2009/10/29 14:14:00 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:14:09 ossec-syscheckd: socket busy ..
2009/10/29 14:14:19 ossec-syscheckd: socket busy ..
2009/10/29 14:14:19 ossec-syscheckd: socketerr (not available).
2009/10/29 14:14:19 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:14:28 ossec-syscheckd: socket busy ..
2009/10/29 14:14:38 ossec-syscheckd: socket busy ..
2009/10/29 14:14:38 ossec-syscheckd: socketerr (not available).
2009/10/29 14:14:38 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:14:38 ossec-logcollector: socketerr (not available).
2009/10/29 14:14:47 ossec-syscheckd: socket busy ..
2009/10/29 14:14:57 ossec-syscheckd: socket busy ..
2009/10/29 14:14:59 ossec-syscheckd: socketerr (not available).
2009/10/29 14:14:59 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:15:08 ossec-syscheckd: socket busy ..
2009/10/29 14:15:18 ossec-syscheckd: socket busy ..
2009/10/29 14:15:18 ossec-syscheckd: socketerr (not available).
2009/10/29 14:15:18 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:15:27 ossec-syscheckd: socket busy ..
2009/10/29 14:15:37 ossec-syscheckd: socket busy ..
2009/10/29 14:15:37 ossec-syscheckd: socketerr (not available).
2009/10/29 14:15:37 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:15:46 ossec-syscheckd: socket busy ..
2009/10/29 14:15:56 ossec-syscheckd: socket busy ..
2009/10/29 14:15:56 ossec-syscheckd: socketerr (not available).
2009/10/29 14:15:56 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:16:05 ossec-syscheckd: socket busy ..
2009/10/29 14:16:15 ossec-syscheckd: socket busy ..
2009/10/29 14:16:15 ossec-syscheckd: socketerr (not available).
2009/10/29 14:16:15 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:16:24 ossec-syscheckd: socket busy ..
2009/10/29 14:16:34 ossec-syscheckd: socket busy ..
2009/10/29 14:16:34 ossec-syscheckd: socketerr (not available).
2009/10/29 14:16:34 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:16:43 ossec-syscheckd: socket busy ..
2009/10/29 14:16:49 ossec-logcollector: socketerr (not available).
2009/10/29 14:16:53 ossec-syscheckd: socket busy ..
2009/10/29 14:16:53 ossec-syscheckd: socketerr (not available).
2009/10/29 14:16:53 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:17:02 ossec-syscheckd: socket busy ..
2009/10/29 14:17:12 ossec-syscheckd: socket busy ..
2009/10/29 14:17:12 ossec-syscheckd: socketerr (not available).
2009/10/29 14:17:12 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:17:21 ossec-syscheckd: socket busy ..
2009/10/29 14:17:31 ossec-syscheckd: socket busy ..
2009/10/29 14:17:31 ossec-syscheckd: socketerr (not available).
2009/10/29 14:17:31 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:17:40 ossec-syscheckd: socket busy ..
2009/10/29 14:17:50 ossec-syscheckd: socket busy ..
2009/10/29 14:17:50 ossec-syscheckd: socketerr (not available).
2009/10/29 14:17:50 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:17:59 ossec-syscheckd: socket busy ..
2009/10/29 14:18:09 ossec-syscheckd: socket busy ..
2009/10/29 14:18:09 ossec-syscheckd: socketerr (not available).
2009/10/29 14:18:09 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:18:18 ossec-syscheckd: socket busy ..
2009/10/29 14:18:28 ossec-syscheckd: socket busy ..
2009/10/29 14:18:28 ossec-syscheckd: socketerr (not available).
2009/10/29 14:18:28 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:18:37 ossec-syscheckd: socket busy ..
2009/10/29 14:18:47 ossec-syscheckd: socket busy ..
2009/10/29 14:18:47 ossec-syscheckd: socketerr (not available).
2009/10/29 14:18:47 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:18:56 ossec-syscheckd: socket busy ..
2009/10/29 14:19:00 ossec-logcollector: socketerr (not available).
2009/10/29 14:19:06 ossec-syscheckd: socket busy ..
2009/10/29 14:19:06 ossec-syscheckd: socketerr (not available).
2009/10/29 14:19:06 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:19:15 ossec-syscheckd: socket busy ..
2009/10/29 14:19:25 ossec-syscheckd: socket busy ..
2009/10/29 14:19:25 ossec-syscheckd: socketerr (not available).
2009/10/29 14:19:25 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:19:34 ossec-syscheckd: socket busy ..
2009/10/29 14:19:44 ossec-syscheckd: socket busy ..
2009/10/29 14:19:46 ossec-syscheckd: socketerr (not available).
2009/10/29 14:19:46 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:19:55 ossec-syscheckd: socket busy ..
2009/10/29 14:20:05 ossec-syscheckd: socket busy ..
2009/10/29 14:20:05 ossec-syscheckd: socketerr (not available).
2009/10/29 14:20:05 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:20:14 ossec-syscheckd: socket busy ..
2009/10/29 14:20:24 ossec-syscheckd: socket busy ..
2009/10/29 14:20:24 ossec-syscheckd: socketerr (not available).
2009/10/29 14:20:24 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:20:33 ossec-syscheckd: socket busy ..
2009/10/29 14:20:43 ossec-syscheckd: socket busy ..
2009/10/29 14:20:43 ossec-syscheckd: socketerr (not available).
2009/10/29 14:20:43 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:20:52 ossec-syscheckd: socket busy ..
2009/10/29 14:21:02 ossec-syscheckd: socket busy ..
2009/10/29 14:21:02 ossec-syscheckd: socketerr (not available).
2009/10/29 14:21:02 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:21:10 ossec-logcollector: socketerr (not available).
2009/10/29 14:21:11 ossec-syscheckd: socket busy ..
2009/10/29 14:21:22 ossec-syscheckd: socket busy ..
2009/10/29 14:21:22 ossec-syscheckd: socketerr (not available).
2009/10/29 14:21:22 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:21:31 ossec-syscheckd: socket busy ..
2009/10/29 14:21:41 ossec-syscheckd: socket busy ..
2009/10/29 14:21:41 ossec-syscheckd: socketerr (not available).
2009/10/29 14:21:41 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:21:50 ossec-syscheckd: socket busy ..
2009/10/29 14:22:00 ossec-syscheckd: socket busy ..
2009/10/29 14:22:00 ossec-syscheckd: socketerr (not available).
2009/10/29 14:22:00 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:22:09 ossec-syscheckd: socket busy ..
2009/10/29 14:22:19 ossec-syscheckd: socket busy ..
2009/10/29 14:22:19 ossec-syscheckd: socketerr (not available).
2009/10/29 14:22:19 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:22:21 ossec-logcollector: socketerr (not available).
2009/10/29 14:22:21 ossec-logcollector(1224): ERROR: Error sending
message to queue.
2009/10/29 14:22:28 ossec-syscheckd: socket busy ..
2009/10/29 14:22:38 ossec-syscheckd: socket busy ..
2009/10/29 14:22:38 ossec-syscheckd: socketerr (not available).
2009/10/29 14:22:38 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:22:47 ossec-syscheckd: socket busy ..
2009/10/29 14:22:57 ossec-syscheckd: socket busy ..
2009/10/29 14:22:57 ossec-syscheckd: socketerr (not available).
2009/10/29 14:22:57 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:23:06 ossec-syscheckd: socket busy ..
2009/10/29 14:23:16 ossec-syscheckd: socket busy ..
2009/10/29 14:23:16 ossec-syscheckd: socketerr (not available).
2009/10/29 14:23:16 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:23:25 ossec-syscheckd: socket busy ..
2009/10/29 14:23:30 ossec-logcollector: socket busy ..
2009/10/29 14:23:35 ossec-syscheckd: socket busy ..
2009/10/29 14:23:35 ossec-syscheckd: socketerr (not available).
2009/10/29 14:23:35 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:23:40 ossec-logcollector: socket busy ..
2009/10/29 14:23:44 ossec-syscheckd: socket busy ..
2009/10/29 14:23:54 ossec-syscheckd: socket busy ..
2009/10/29 14:23:54 ossec-syscheckd: socketerr (not available).
2009/10/29 14:23:54 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:24:03 ossec-syscheckd: socket busy ..
2009/10/29 14:24:13 ossec-syscheckd: socket busy ..
2009/10/29 14:24:13 ossec-syscheckd: socketerr (not available).
2009/10/29 14:24:13 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:24:22 ossec-syscheckd: socket busy ..
2009/10/29 14:24:32 ossec-syscheckd: socket busy ..
2009/10/29 14:24:34 ossec-syscheckd: socketerr (not available).
2009/10/29 14:24:34 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:24:43 ossec-syscheckd: socket busy ..
2009/10/29 14:24:53 ossec-syscheckd: socket busy ..
2009/10/29 14:24:53 ossec-syscheckd: socketerr (not available).
2009/10/29 14:24:53 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:25:02 ossec-syscheckd: socket busy ..
2009/10/29 14:25:12 ossec-syscheckd: socket busy ..
2009/10/29 14:25:12 ossec-syscheckd: socketerr (not available).
2009/10/29 14:25:12 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:25:21 ossec-syscheckd: socket busy ..
2009/10/29 14:25:31 ossec-syscheckd: socket busy ..
2009/10/29 14:25:31 ossec-syscheckd: socketerr (not available).
2009/10/29 14:25:31 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:25:40 ossec-syscheckd: socket busy ..
2009/10/29 14:25:50 ossec-syscheckd: socket busy ..
2009/10/29 14:25:50 ossec-syscheckd: socketerr (not available).
2009/10/29 14:25:50 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:25:51 ossec-logcollector: socketerr (not available).
2009/10/29 14:25:59 ossec-syscheckd: socket busy ..
2009/10/29 14:26:09 ossec-syscheckd: socket busy ..
2009/10/29 14:26:09 ossec-syscheckd: socketerr (not available).
2009/10/29 14:26:09 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:26:18 ossec-syscheckd: socket busy ..
2009/10/29 14:26:28 ossec-syscheckd: socket busy ..
2009/10/29 14:26:28 ossec-syscheckd: socketerr (not available).
2009/10/29 14:26:28 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:26:37 ossec-syscheckd: socket busy ..
2009/10/29 14:26:47 ossec-syscheckd: socket busy ..
2009/10/29 14:26:47 ossec-syscheckd: socketerr (not available).
2009/10/29 14:26:47 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:26:56 ossec-syscheckd: socket busy ..
2009/10/29 14:27:06 ossec-syscheckd: socket busy ..
2009/10/29 14:27:06 ossec-syscheckd: socketerr (not available).
2009/10/29 14:27:06 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:27:15 ossec-syscheckd: socket busy ..
2009/10/29 14:27:25 ossec-syscheckd: socket busy ..
2009/10/29 14:27:25 ossec-syscheckd: socketerr (not available).
2009/10/29 14:27:25 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:27:34 ossec-syscheckd: socket busy ..
2009/10/29 14:27:44 ossec-syscheckd: socket busy ..
2009/10/29 14:27:44 ossec-syscheckd: socketerr (not available).
2009/10/29 14:27:44 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:27:53 ossec-syscheckd: socket busy ..
2009/10/29 14:28:01 ossec-logcollector: socketerr (not available).
2009/10/29 14:28:03 ossec-syscheckd: socket busy ..
2009/10/29 14:28:03 ossec-syscheckd: socketerr (not available).
2009/10/29 14:28:03 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:28:12 ossec-syscheckd: socket busy ..
2009/10/29 14:28:15 ossec-logcollector(1225): INFO: SIGNAL Received.
Exit Cleaning...
2009/10/29 14:28:15 ossec-syscheckd(1225): INFO: SIGNAL Received. Exit
Cleaning...
2009/10/29 14:28:15 ossec-agentd(1225): INFO: SIGNAL Received. Exit
Cleaning...
2009/10/29 14:28:15 ossec-execd(1314): INFO: Shutdown received.
Deleting responses.
2009/10/29 14:28:15 ossec-execd(1225): INFO: SIGNAL Received. Exit
Cleaning...
2009/10/29 14:39:05 ossec-execd: INFO: Started (pid: 25214).
2009/10/29 14:39:05 ossec-agentd(1410): INFO: Reading authentication
keys file.
2009/10/29 14:39:05 ossec-agentd: INFO: No previous counter available
for 'm87s00'.
2009/10/29 14:39:05 ossec-agentd: INFO: Assigning counter for agent
m87s00: '0:0'.
2009/10/29 14:39:05 ossec-agentd: INFO: Assigning sender counter: 0:5
2009/10/29 14:39:05 ossec-agentd: INFO: Started (pid: 25218).
2009/10/29 14:39:05 ossec-agentd: INFO: Server IP Address:
10.99.254.31
2009/10/29 14:39:05 ossec-agentd: INFO: Trying to connect to server
(10.99.254.31:1514).
2009/10/29 14:39:05 ossec-agentd(4102): INFO: Connected to the server
(10.99.254.31:1514).
2009/10/29 14:39:09 ossec-syscheckd: INFO: Started (pid: 25226).
2009/10/29 14:39:09 ossec-rootcheck: INFO: Started (pid: 25226).
2009/10/29 14:39:09 ossec-syscheckd: INFO: Monitoring directory: '/
etc'.
2009/10/29 14:39:09 ossec-syscheckd: INFO: Monitoring directory: '/usr/
bin'.
2009/10/29 14:39:09 ossec-syscheckd: INFO: Monitoring directory: '/usr/
sbin'.
2009/10/29 14:39:09 ossec-syscheckd: INFO: Monitoring directory: '/
bin'.
2009/10/29 14:39:09 ossec-syscheckd: INFO: Monitoring directory: '/
sbin'.
2009/10/29 14:39:11 ossec-logcollector(1225): INFO: SIGNAL Received.
Exit Cleaning...
2009/10/29 14:39:11 ossec-syscheckd(1225): INFO: SIGNAL Received. Exit
Cleaning...
2009/10/29 14:39:11 ossec-agentd(1225): INFO: SIGNAL Received. Exit
Cleaning...
2009/10/29 14:39:11 ossec-execd(1314): INFO: Shutdown received.
Deleting responses.
2009/10/29 14:39:11 ossec-execd(1225): INFO: SIGNAL Received. Exit
Cleaning...
2009/10/29 14:39:21 ossec-execd: INFO: Started (pid: 25272).
2009/10/29 14:39:21 ossec-agentd(1410): INFO: Reading authentication
keys file.
2009/10/29 14:39:21 ossec-agentd: INFO: No previous counter available
for 'm87s00'.
2009/10/29 14:39:21 ossec-agentd: INFO: Assigning counter for agent
m87s00: '0:0'.
2009/10/29 14:39:21 ossec-agentd: INFO: Assigning sender counter: 0:10
2009/10/29 14:39:21 ossec-agentd: INFO: Started (pid: 25276).
2009/10/29 14:39:21 ossec-agentd: INFO: Server IP Address:
10.99.254.31
2009/10/29 14:39:21 ossec-agentd: INFO: Trying to connect to server
(10.99.254.31:1514).
2009/10/29 14:39:21 ossec-agentd(4102): INFO: Connected to the server
(10.99.254.31:1514).
2009/10/29 14:39:25 ossec-syscheckd: INFO: Started (pid: 25284).
2009/10/29 14:39:25 ossec-rootcheck: INFO: Started (pid: 25284).
2009/10/29 14:39:25 ossec-syscheckd: INFO: Monitoring directory: '/
etc'.
2009/10/29 14:39:25 ossec-syscheckd: INFO: Monitoring directory: '/usr/
bin'.
2009/10/29 14:39:25 ossec-syscheckd: INFO: Monitoring directory: '/usr/
sbin'.
2009/10/29 14:39:25 ossec-syscheckd: INFO: Monitoring directory: '/
bin'.
2009/10/29 14:39:25 ossec-syscheckd: INFO: Monitoring directory: '/
sbin'.
2009/10/29 14:39:27 ossec-logcollector(1950): INFO: Analyzing file: '/
var/adm/syslog'.
2009/10/29 14:39:27 ossec-logcollector(1950): INFO: Analyzing file: '/
var/adm/syslog/syslog.log'.
2009/10/29 14:39:27 ossec-logcollector: INFO: Started (pid: 25280).
2009/10/29 14:39:57 ossec-syscheckd: INFO: Starting syscheck database
(pre-scan).
2009/10/29 14:44:04 ossec-syscheckd: INFO: Finished creating syscheck
database (pre-scan completed).
2009/10/29 14:46:04 ossec-syscheckd: INFO: Starting syscheck scan
(forwarding database).
2009/10/29 14:46:32 ossec-syscheckd: socket busy ..
2009/10/29 14:46:42 ossec-syscheckd: socket busy ..
2009/10/29 14:46:42 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:46:51 ossec-syscheckd: socket busy ..
2009/10/29 14:47:01 ossec-syscheckd: socket busy ..
2009/10/29 14:47:01 ossec-syscheckd: socketerr (not available).
2009/10/29 14:47:01 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:47:10 ossec-syscheckd: socket busy ..
2009/10/29 14:47:20 ossec-syscheckd: socket busy ..
2009/10/29 14:47:20 ossec-syscheckd: socketerr (not available).
2009/10/29 14:47:20 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:47:29 ossec-syscheckd: socket busy ..
2009/10/29 14:47:39 ossec-syscheckd: socket busy ..
2009/10/29 14:47:39 ossec-syscheckd: socketerr (not available).
2009/10/29 14:47:39 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:47:48 ossec-syscheckd: socket busy ..
2009/10/29 14:47:58 ossec-syscheckd: socket busy ..
2009/10/29 14:47:58 ossec-syscheckd: socketerr (not available).
2009/10/29 14:47:58 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:48:07 ossec-syscheckd: socket busy ..
2009/10/29 14:48:17 ossec-syscheckd: socket busy ..
2009/10/29 14:48:17 ossec-syscheckd: socketerr (not available).
2009/10/29 14:48:17 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:48:26 ossec-syscheckd: socket busy ..
2009/10/29 14:48:36 ossec-syscheckd: socket busy ..
2009/10/29 14:48:38 ossec-syscheckd: socketerr (not available).
2009/10/29 14:48:38 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:48:47 ossec-syscheckd: socket busy ..
2009/10/29 14:48:57 ossec-syscheckd: socket busy ..
2009/10/29 14:48:57 ossec-syscheckd: socketerr (not available).
2009/10/29 14:48:57 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:49:06 ossec-syscheckd: socket busy ..
2009/10/29 14:49:16 ossec-syscheckd: socket busy ..
2009/10/29 14:49:16 ossec-syscheckd: socketerr (not available).
2009/10/29 14:49:16 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:49:25 ossec-syscheckd: socket busy ..
2009/10/29 14:49:35 ossec-syscheckd: socket busy ..
2009/10/29 14:49:35 ossec-syscheckd: socketerr (not available).
2009/10/29 14:49:35 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:49:44 ossec-syscheckd: socket busy ..
2009/10/29 14:49:54 ossec-syscheckd: socket busy ..
2009/10/29 14:49:54 ossec-syscheckd: socketerr (not available).
2009/10/29 14:49:54 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:50:03 ossec-syscheckd: socket busy ..
2009/10/29 14:50:13 ossec-syscheckd: socket busy ..
2009/10/29 14:50:13 ossec-syscheckd: socketerr (not available).
2009/10/29 14:50:13 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:50:22 ossec-syscheckd: socket busy ..
2009/10/29 14:50:30 ossec-logcollector: socket busy ..
2009/10/29 14:50:32 ossec-syscheckd: socket busy ..
2009/10/29 14:50:32 ossec-syscheckd: socketerr (not available).
2009/10/29 14:50:32 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:50:40 ossec-logcollector: socket busy ..
2009/10/29 14:50:41 ossec-syscheckd: socket busy ..
2009/10/29 14:50:51 ossec-syscheckd: socket busy ..
2009/10/29 14:50:51 ossec-syscheckd: socketerr (not available).
2009/10/29 14:50:51 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:51:00 ossec-syscheckd: socket busy ..
2009/10/29 14:51:10 ossec-syscheckd: socket busy ..
2009/10/29 14:51:10 ossec-syscheckd: socketerr (not available).
2009/10/29 14:51:10 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:51:19 ossec-syscheckd: socket busy ..
2009/10/29 14:51:29 ossec-syscheckd: socket busy ..
2009/10/29 14:51:29 ossec-syscheckd: socketerr (not available).
2009/10/29 14:51:29 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:51:38 ossec-syscheckd: socket busy ..
2009/10/29 14:51:48 ossec-syscheckd: socket busy ..
2009/10/29 14:51:48 ossec-syscheckd: socketerr (not available).
2009/10/29 14:51:48 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:51:57 ossec-syscheckd: socket busy ..
2009/10/29 14:52:07 ossec-syscheckd: socket busy ..
2009/10/29 14:52:07 ossec-syscheckd: socketerr (not available).
2009/10/29 14:52:07 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:52:16 ossec-syscheckd: socket busy ..
2009/10/29 14:52:26 ossec-syscheckd: socket busy ..
2009/10/29 14:52:26 ossec-syscheckd: socketerr (not available).
2009/10/29 14:52:26 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:52:35 ossec-syscheckd: socket busy ..
2009/10/29 14:52:45 ossec-syscheckd: socket busy ..
2009/10/29 14:52:45 ossec-syscheckd: socketerr (not available).
2009/10/29 14:52:45 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:52:50 ossec-logcollector: socketerr (not available).
2009/10/29 14:52:54 ossec-syscheckd: socket busy ..
2009/10/29 14:53:04 ossec-syscheckd: socket busy ..
2009/10/29 14:53:04 ossec-syscheckd: socketerr (not available).
2009/10/29 14:53:04 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:53:13 ossec-syscheckd: socket busy ..
2009/10/29 14:53:23 ossec-syscheckd: socket busy ..
2009/10/29 14:53:25 ossec-syscheckd: socketerr (not available).
2009/10/29 14:53:25 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:53:34 ossec-syscheckd: socket busy ..
2009/10/29 14:53:44 ossec-syscheckd: socket busy ..
2009/10/29 14:53:44 ossec-syscheckd: socketerr (not available).
2009/10/29 14:53:44 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:53:53 ossec-syscheckd: socket busy ..
2009/10/29 14:54:03 ossec-syscheckd: socket busy ..
2009/10/29 14:54:03 ossec-syscheckd: socketerr (not available).
2009/10/29 14:54:03 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:54:13 ossec-syscheckd: socket busy ..
2009/10/29 14:54:23 ossec-syscheckd: socket busy ..
2009/10/29 14:54:23 ossec-syscheckd: socketerr (not available).
2009/10/29 14:54:23 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:54:32 ossec-syscheckd: socket busy ..
2009/10/29 14:54:42 ossec-syscheckd: socket busy ..
2009/10/29 14:54:42 ossec-syscheckd: socketerr (not available).
2009/10/29 14:54:42 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:54:51 ossec-syscheckd: socket busy ..
2009/10/29 14:55:01 ossec-syscheckd: socket busy ..
2009/10/29 14:55:01 ossec-syscheckd: socketerr (not available).
2009/10/29 14:55:01 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:55:01 ossec-logcollector: socketerr (not available).
2009/10/29 14:55:10 ossec-syscheckd: socket busy ..
2009/10/29 14:55:20 ossec-syscheckd: socket busy ..
2009/10/29 14:55:20 ossec-syscheckd: socketerr (not available).
2009/10/29 14:55:20 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:55:29 ossec-syscheckd: socket busy ..
2009/10/29 14:55:39 ossec-syscheckd: socket busy ..
2009/10/29 14:55:39 ossec-syscheckd: socketerr (not available).
2009/10/29 14:55:39 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:55:48 ossec-syscheckd: socket busy ..
2009/10/29 14:55:58 ossec-syscheckd: socket busy ..
2009/10/29 14:55:58 ossec-syscheckd: socketerr (not available).
2009/10/29 14:55:58 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:56:07 ossec-syscheckd: socket busy ..
2009/10/29 14:56:17 ossec-syscheckd: socket busy ..
2009/10/29 14:56:17 ossec-syscheckd: socketerr (not available).
2009/10/29 14:56:17 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:56:26 ossec-syscheckd: socket busy ..
2009/10/29 14:56:36 ossec-syscheckd: socket busy ..
2009/10/29 14:56:36 ossec-syscheckd: socketerr (not available).
2009/10/29 14:56:36 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:56:45 ossec-syscheckd: socket busy ..
2009/10/29 14:56:55 ossec-syscheckd: socket busy ..
2009/10/29 14:56:55 ossec-syscheckd: socketerr (not available).
2009/10/29 14:56:55 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:57:04 ossec-syscheckd: socket busy ..
2009/10/29 14:57:12 ossec-logcollector: socketerr (not available).
2009/10/29 14:57:14 ossec-syscheckd: socket busy ..
2009/10/29 14:57:14 ossec-syscheckd: socketerr (not available).
2009/10/29 14:57:14 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:57:23 ossec-syscheckd: socket busy ..
2009/10/29 14:57:33 ossec-syscheckd: socket busy ..
2009/10/29 14:57:33 ossec-syscheckd: socketerr (not available).
2009/10/29 14:57:33 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:57:42 ossec-syscheckd: socket busy ..
2009/10/29 14:57:52 ossec-syscheckd: socket busy ..
2009/10/29 14:57:52 ossec-syscheckd: socketerr (not available).
2009/10/29 14:57:52 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:58:01 ossec-syscheckd: socket busy ..
2009/10/29 14:58:11 ossec-syscheckd: socket busy ..
2009/10/29 14:58:13 ossec-syscheckd: socketerr (not available).
2009/10/29 14:58:13 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:58:22 ossec-syscheckd: socket busy ..
2009/10/29 14:58:32 ossec-syscheckd: socket busy ..
2009/10/29 14:58:32 ossec-syscheckd: socketerr (not available).
2009/10/29 14:58:32 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:58:41 ossec-syscheckd: socket busy ..
2009/10/29 14:58:51 ossec-syscheckd: socket busy ..
2009/10/29 14:58:51 ossec-syscheckd: socketerr (not available).
2009/10/29 14:58:51 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:59:00 ossec-syscheckd: socket busy ..
2009/10/29 14:59:10 ossec-syscheckd: socket busy ..
2009/10/29 14:59:10 ossec-syscheckd: socketerr (not available).
2009/10/29 14:59:10 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:59:19 ossec-syscheckd: socket busy ..
2009/10/29 14:59:22 ossec-logcollector: socketerr (not available).
2009/10/29 14:59:29 ossec-syscheckd: socket busy ..
2009/10/29 14:59:29 ossec-syscheckd: socketerr (not available).
2009/10/29 14:59:29 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:59:38 ossec-syscheckd: socket busy ..
2009/10/29 14:59:48 ossec-syscheckd: socket busy ..
2009/10/29 14:59:48 ossec-syscheckd: socketerr (not available).
2009/10/29 14:59:48 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 14:59:57 ossec-syscheckd: socket busy ..
2009/10/29 15:00:07 ossec-syscheckd: socket busy ..
2009/10/29 15:00:07 ossec-syscheckd: socketerr (not available).
2009/10/29 15:00:07 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:00:16 ossec-syscheckd: socket busy ..
2009/10/29 15:00:26 ossec-syscheckd: socket busy ..
2009/10/29 15:00:26 ossec-syscheckd: socketerr (not available).
2009/10/29 15:00:26 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:00:35 ossec-syscheckd: socket busy ..
2009/10/29 15:00:45 ossec-syscheckd: socket busy ..
2009/10/29 15:00:45 ossec-syscheckd: socketerr (not available).
2009/10/29 15:00:45 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:00:54 ossec-syscheckd: socket busy ..
2009/10/29 15:01:04 ossec-syscheckd: socket busy ..
2009/10/29 15:01:04 ossec-syscheckd: socketerr (not available).
2009/10/29 15:01:04 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:01:13 ossec-syscheckd: socket busy ..
2009/10/29 15:01:23 ossec-syscheckd: socket busy ..
2009/10/29 15:01:23 ossec-syscheckd: socketerr (not available).
2009/10/29 15:01:23 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:01:32 ossec-syscheckd: socket busy ..
2009/10/29 15:01:33 ossec-logcollector: socketerr (not available).
2009/10/29 15:01:42 ossec-syscheckd: socket busy ..
2009/10/29 15:01:42 ossec-syscheckd: socketerr (not available).
2009/10/29 15:01:42 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:01:51 ossec-syscheckd: socket busy ..
2009/10/29 15:02:02 ossec-syscheckd: socket busy ..
2009/10/29 15:02:02 ossec-syscheckd: socketerr (not available).
2009/10/29 15:02:02 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:02:11 ossec-syscheckd: socket busy ..
2009/10/29 15:02:21 ossec-syscheckd: socket busy ..
2009/10/29 15:02:21 ossec-syscheckd: socketerr (not available).
2009/10/29 15:02:21 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:02:30 ossec-syscheckd: socket busy ..
2009/10/29 15:02:40 ossec-syscheckd: socket busy ..
2009/10/29 15:02:40 ossec-syscheckd: socketerr (not available).
2009/10/29 15:02:40 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:02:49 ossec-syscheckd: socket busy ..
2009/10/29 15:02:59 ossec-syscheckd: socket busy ..
2009/10/29 15:03:01 ossec-syscheckd: socketerr (not available).
2009/10/29 15:03:01 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:03:10 ossec-syscheckd: socket busy ..
2009/10/29 15:03:20 ossec-syscheckd: socket busy ..
2009/10/29 15:03:20 ossec-syscheckd: socketerr (not available).
2009/10/29 15:03:20 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:03:29 ossec-syscheckd: socket busy ..
2009/10/29 15:03:39 ossec-syscheckd: socket busy ..
2009/10/29 15:03:39 ossec-syscheckd: socketerr (not available).
2009/10/29 15:03:39 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:03:44 ossec-logcollector: socketerr (not available).
2009/10/29 15:03:48 ossec-syscheckd: socket busy ..
2009/10/29 15:03:58 ossec-syscheckd: socket busy ..
2009/10/29 15:03:58 ossec-syscheckd: socketerr (not available).
2009/10/29 15:03:58 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:04:07 ossec-syscheckd: socket busy ..
2009/10/29 15:04:17 ossec-syscheckd: socket busy ..
2009/10/29 15:04:17 ossec-syscheckd: socketerr (not available).
2009/10/29 15:04:17 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:04:26 ossec-syscheckd: socket busy ..
2009/10/29 15:04:36 ossec-syscheckd: socket busy ..
2009/10/29 15:04:36 ossec-syscheckd: socketerr (not available).
2009/10/29 15:04:36 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:04:45 ossec-syscheckd: socket busy ..
2009/10/29 15:04:55 ossec-syscheckd: socket busy ..
2009/10/29 15:04:55 ossec-syscheckd: socketerr (not available).
2009/10/29 15:04:55 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:05:04 ossec-syscheckd: socket busy ..
2009/10/29 15:05:14 ossec-syscheckd: socket busy ..
2009/10/29 15:05:14 ossec-syscheckd: socketerr (not available).
2009/10/29 15:05:14 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:05:23 ossec-syscheckd: socket busy ..
2009/10/29 15:05:33 ossec-syscheckd: socket busy ..
2009/10/29 15:05:33 ossec-syscheckd: socketerr (not available).
2009/10/29 15:05:33 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:05:40 ossec-logcollector: socketerr (not available).
2009/10/29 15:05:40 ossec-logcollector(1224): ERROR: Error sending
message to queue.
2009/10/29 15:05:42 ossec-syscheckd: socket busy ..
2009/10/29 15:05:52 ossec-syscheckd: socket busy ..
2009/10/29 15:05:52 ossec-syscheckd: socketerr (not available).
2009/10/29 15:05:52 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:06:01 ossec-syscheckd: socket busy ..
2009/10/29 15:06:03 ossec-logcollector: socket busy ..
2009/10/29 15:06:11 ossec-syscheckd: socket busy ..
2009/10/29 15:06:11 ossec-syscheckd: socketerr (not available).
2009/10/29 15:06:11 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:06:13 ossec-logcollector: socket busy ..
2009/10/29 15:06:20 ossec-syscheckd: socket busy ..
2009/10/29 15:06:30 ossec-syscheckd: socket busy ..
2009/10/29 15:06:30 ossec-syscheckd: socketerr (not available).
2009/10/29 15:06:30 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:06:39 ossec-syscheckd: socket busy ..
2009/10/29 15:06:49 ossec-syscheckd: socket busy ..
2009/10/29 15:06:49 ossec-syscheckd: socketerr (not available).
2009/10/29 15:06:49 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:06:58 ossec-syscheckd: socket busy ..
2009/10/29 15:07:08 ossec-syscheckd: socket busy ..
2009/10/29 15:07:08 ossec-syscheckd: socketerr (not available).
2009/10/29 15:07:08 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:07:17 ossec-syscheckd: socket busy ..
2009/10/29 15:07:27 ossec-syscheckd: socket busy ..
2009/10/29 15:07:27 ossec-syscheckd: socketerr (not available).
2009/10/29 15:07:27 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:07:36 ossec-syscheckd: socket busy ..
2009/10/29 15:07:46 ossec-syscheckd: socket busy ..
2009/10/29 15:07:48 ossec-syscheckd: socketerr (not available).
2009/10/29 15:07:48 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:07:57 ossec-syscheckd: socket busy ..
2009/10/29 15:08:07 ossec-syscheckd: socket busy ..
2009/10/29 15:08:07 ossec-syscheckd: socketerr (not available).
2009/10/29 15:08:07 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:08:16 ossec-syscheckd: socket busy ..
2009/10/29 15:08:24 ossec-logcollector: socketerr (not available).
2009/10/29 15:08:26 ossec-syscheckd: socket busy ..
2009/10/29 15:08:26 ossec-syscheckd: socketerr (not available).
2009/10/29 15:08:26 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:08:35 ossec-syscheckd: socket busy ..
2009/10/29 15:08:45 ossec-syscheckd: socket busy ..
2009/10/29 15:08:45 ossec-syscheckd: socketerr (not available).
2009/10/29 15:08:45 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:08:54 ossec-syscheckd: socket busy ..
2009/10/29 15:09:04 ossec-syscheckd: socket busy ..
2009/10/29 15:09:04 ossec-syscheckd: socketerr (not available).
2009/10/29 15:09:04 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:09:13 ossec-syscheckd: socket busy ..
2009/10/29 15:09:23 ossec-syscheckd: socket busy ..
2009/10/29 15:09:23 ossec-syscheckd: socketerr (not available).
2009/10/29 15:09:23 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:09:32 ossec-syscheckd: socket busy ..
2009/10/29 15:09:42 ossec-syscheckd: socket busy ..
2009/10/29 15:09:42 ossec-syscheckd: socketerr (not available).
2009/10/29 15:09:42 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:09:52 ossec-syscheckd: socket busy ..
2009/10/29 15:10:02 ossec-syscheckd: socket busy ..
2009/10/29 15:10:02 ossec-syscheckd: socketerr (not available).
2009/10/29 15:10:02 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:10:11 ossec-syscheckd: socket busy ..
2009/10/29 15:10:21 ossec-syscheckd: socket busy ..
2009/10/29 15:10:21 ossec-syscheckd: socketerr (not available).
2009/10/29 15:10:21 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:10:30 ossec-syscheckd: socket busy ..
2009/10/29 15:10:35 ossec-logcollector: socketerr (not available).
2009/10/29 15:10:40 ossec-syscheckd: socket busy ..
2009/10/29 15:10:40 ossec-syscheckd: socketerr (not available).
2009/10/29 15:10:40 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:10:49 ossec-syscheckd: socket busy ..
2009/10/29 15:10:59 ossec-syscheckd: socket busy ..
2009/10/29 15:10:59 ossec-syscheckd: socketerr (not available).
2009/10/29 15:10:59 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:11:08 ossec-syscheckd: socket busy ..
2009/10/29 15:11:18 ossec-syscheckd: socket busy ..
2009/10/29 15:11:18 ossec-syscheckd: socketerr (not available).
2009/10/29 15:11:18 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:11:27 ossec-syscheckd: socket busy ..
2009/10/29 15:11:37 ossec-syscheckd: socket busy ..
2009/10/29 15:11:37 ossec-syscheckd: socketerr (not available).
2009/10/29 15:11:37 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:11:46 ossec-syscheckd: socket busy ..
2009/10/29 15:11:56 ossec-syscheckd: socket busy ..
2009/10/29 15:11:56 ossec-syscheckd: socketerr (not available).
2009/10/29 15:11:56 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:12:05 ossec-syscheckd: socket busy ..
2009/10/29 15:12:15 ossec-syscheckd: socket busy ..
2009/10/29 15:12:15 ossec-syscheckd: socketerr (not available).
2009/10/29 15:12:15 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:12:24 ossec-syscheckd: socket busy ..
2009/10/29 15:12:34 ossec-syscheckd: socket busy ..
2009/10/29 15:12:36 ossec-syscheckd: socketerr (not available).
2009/10/29 15:12:36 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:12:45 ossec-syscheckd: socket busy ..
2009/10/29 15:12:45 ossec-logcollector: socketerr (not available).
2009/10/29 15:12:55 ossec-syscheckd: socket busy ..
2009/10/29 15:12:55 ossec-syscheckd: socketerr (not available).
2009/10/29 15:12:55 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:13:04 ossec-syscheckd: socket busy ..
2009/10/29 15:13:14 ossec-syscheckd: socket busy ..
2009/10/29 15:13:14 ossec-syscheckd: socketerr (not available).
2009/10/29 15:13:14 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:13:23 ossec-syscheckd: socket busy ..
2009/10/29 15:13:33 ossec-syscheckd: socket busy ..
2009/10/29 15:13:33 ossec-syscheckd: socketerr (not available).
2009/10/29 15:13:33 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:13:42 ossec-syscheckd: socket busy ..
2009/10/29 15:13:52 ossec-syscheckd: socket busy ..
2009/10/29 15:13:52 ossec-syscheckd: socketerr (not available).
2009/10/29 15:13:52 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:14:01 ossec-syscheckd: socket busy ..
2009/10/29 15:14:11 ossec-syscheckd: socket busy ..
2009/10/29 15:14:11 ossec-syscheckd: socketerr (not available).
2009/10/29 15:14:11 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:14:16 ossec-logcollector: socketerr (not available).
2009/10/29 15:14:16 ossec-logcollector(1224): ERROR: Error sending
message to queue.
2009/10/29 15:14:20 ossec-syscheckd: socket busy ..
2009/10/29 15:14:29 ossec-logcollector: socket busy ..
2009/10/29 15:14:30 ossec-syscheckd: socket busy ..
2009/10/29 15:14:30 ossec-syscheckd: socketerr (not available).
2009/10/29 15:14:30 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:14:39 ossec-logcollector: socket busy ..
2009/10/29 15:14:39 ossec-logcollector(1224): ERROR: Error sending
message to queue.
2009/10/29 15:14:39 ossec-syscheckd: socket busy ..
2009/10/29 15:14:44 ossec-logcollector(1225): INFO: SIGNAL Received.
Exit Cleaning...
2009/10/29 15:14:44 ossec-syscheckd(1225): INFO: SIGNAL Received. Exit
Cleaning...
2009/10/29 15:14:44 ossec-agentd(1225): INFO: SIGNAL Received. Exit
Cleaning...
2009/10/29 15:14:44 ossec-execd(1314): INFO: Shutdown received.
Deleting responses.
2009/10/29 15:14:44 ossec-execd(1225): INFO: SIGNAL Received. Exit
Cleaning...
2009/10/29 15:15:00 ossec-execd: INFO: Started (pid: 25773).
2009/10/29 15:15:00 ossec-agentd(1410): INFO: Reading authentication
keys file.
2009/10/29 15:15:00 ossec-agentd: INFO: No previous counter available
for 'm87s00'.
2009/10/29 15:15:00 ossec-agentd: INFO: Assigning counter for agent
m87s00: '0:0'.
2009/10/29 15:15:00 ossec-agentd: INFO: Assigning sender counter: 0:15
2009/10/29 15:15:00 ossec-agentd: INFO: Started (pid: 25777).
2009/10/29 15:15:00 ossec-agentd: INFO: Server IP Address:
10.99.254.31
2009/10/29 15:15:00 ossec-agentd: INFO: Trying to connect to server
(10.99.254.31:1514).
2009/10/29 15:15:00 ossec-agentd(4102): INFO: Connected to the server
(10.99.254.31:1514).
2009/10/29 15:15:04 ossec-syscheckd: INFO: Started (pid: 25785).
2009/10/29 15:15:04 ossec-rootcheck: INFO: Started (pid: 25785).
2009/10/29 15:15:04 ossec-syscheckd: INFO: Monitoring directory: '/
etc'.
2009/10/29 15:15:04 ossec-syscheckd: INFO: Monitoring directory: '/usr/
bin'.
2009/10/29 15:15:04 ossec-syscheckd: INFO: Monitoring directory: '/usr/
sbin'.
2009/10/29 15:15:04 ossec-syscheckd: INFO: Monitoring directory: '/
bin'.
2009/10/29 15:15:04 ossec-syscheckd: INFO: Monitoring directory: '/
sbin'.
2009/10/29 15:15:06 ossec-logcollector(1950): INFO: Analyzing file: '/
var/adm/syslog'.
2009/10/29 15:15:06 ossec-logcollector(1950): INFO: Analyzing file: '/
var/adm/syslog/syslog.log'.
2009/10/29 15:15:06 ossec-logcollector: INFO: Started (pid: 25781).
2009/10/29 15:15:36 ossec-syscheckd: INFO: Starting syscheck database
(pre-scan).
2009/10/29 15:19:39 ossec-syscheckd: INFO: Finished creating syscheck
database (pre-scan completed).
2009/10/29 15:21:39 ossec-syscheckd: INFO: Starting syscheck scan
(forwarding database).
2009/10/29 15:22:06 ossec-syscheckd: socket busy ..
2009/10/29 15:22:16 ossec-syscheckd: socket busy ..
2009/10/29 15:22:16 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:22:25 ossec-syscheckd: socket busy ..
2009/10/29 15:22:33 ossec-logcollector: socket busy ..
2009/10/29 15:22:35 ossec-syscheckd: socket busy ..
2009/10/29 15:22:35 ossec-syscheckd: socketerr (not available).
2009/10/29 15:22:35 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:22:43 ossec-logcollector: socket busy ..
2009/10/29 15:22:43 ossec-logcollector(1224): ERROR: Error sending
message to queue.
2009/10/29 15:22:44 ossec-syscheckd: socket busy ..
2009/10/29 15:22:54 ossec-syscheckd: socket busy ..
2009/10/29 15:22:54 ossec-syscheckd: socketerr (not available).
2009/10/29 15:22:54 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:23:03 ossec-syscheckd: socket busy ..
2009/10/29 15:23:13 ossec-syscheckd: socket busy ..
2009/10/29 15:23:13 ossec-syscheckd: socketerr (not available).
2009/10/29 15:23:13 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:23:22 ossec-syscheckd: socket busy ..
2009/10/29 15:23:33 ossec-syscheckd: socket busy ..
2009/10/29 15:23:33 ossec-syscheckd: socketerr (not available).
2009/10/29 15:23:33 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:23:42 ossec-syscheckd: socket busy ..
2009/10/29 15:23:52 ossec-syscheckd: socket busy ..
2009/10/29 15:23:52 ossec-syscheckd: socketerr (not available).
2009/10/29 15:23:52 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:24:01 ossec-syscheckd: socket busy ..
2009/10/29 15:24:11 ossec-syscheckd: socket busy ..
2009/10/29 15:24:13 ossec-syscheckd: socketerr (not available).
2009/10/29 15:24:13 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:24:22 ossec-syscheckd: socket busy ..
2009/10/29 15:24:32 ossec-syscheckd: socket busy ..
2009/10/29 15:24:32 ossec-syscheckd: socketerr (not available).
2009/10/29 15:24:32 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:24:41 ossec-syscheckd: socket busy ..
2009/10/29 15:24:51 ossec-syscheckd: socket busy ..
2009/10/29 15:24:51 ossec-syscheckd: socketerr (not available).
2009/10/29 15:24:51 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:25:00 ossec-syscheckd: socket busy ..
2009/10/29 15:25:10 ossec-syscheckd: socket busy ..
2009/10/29 15:25:10 ossec-syscheckd: socketerr (not available).
2009/10/29 15:25:10 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:25:19 ossec-syscheckd: socket busy ..
2009/10/29 15:25:29 ossec-syscheckd: socket busy ..
2009/10/29 15:25:29 ossec-syscheckd: socketerr (not available).
2009/10/29 15:25:29 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:25:38 ossec-syscheckd: socket busy ..
2009/10/29 15:25:48 ossec-syscheckd: socket busy ..
2009/10/29 15:25:48 ossec-syscheckd: socketerr (not available).
2009/10/29 15:25:48 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:25:57 ossec-syscheckd: socket busy ..
2009/10/29 15:26:07 ossec-syscheckd: socket busy ..
2009/10/29 15:26:07 ossec-syscheckd: socketerr (not available).
2009/10/29 15:26:07 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:26:16 ossec-syscheckd: socket busy ..
2009/10/29 15:26:26 ossec-syscheckd: socket busy ..
2009/10/29 15:26:26 ossec-syscheckd: socketerr (not available).
2009/10/29 15:26:26 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:26:27 ossec-logcollector: socket busy ..
2009/10/29 15:26:35 ossec-syscheckd: socket busy ..
2009/10/29 15:26:37 ossec-logcollector: socket busy ..
2009/10/29 15:26:45 ossec-syscheckd: socket busy ..
2009/10/29 15:26:45 ossec-syscheckd: socketerr (not available).
2009/10/29 15:26:45 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:26:54 ossec-syscheckd: socket busy ..
2009/10/29 15:27:04 ossec-syscheckd: socket busy ..
2009/10/29 15:27:04 ossec-syscheckd: socketerr (not available).
2009/10/29 15:27:04 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:27:13 ossec-syscheckd: socket busy ..
2009/10/29 15:27:23 ossec-syscheckd: socket busy ..
2009/10/29 15:27:23 ossec-syscheckd: socketerr (not available).
2009/10/29 15:27:23 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:27:32 ossec-syscheckd: socket busy ..
2009/10/29 15:27:42 ossec-syscheckd: socket busy ..
2009/10/29 15:27:42 ossec-syscheckd: socketerr (not available).
2009/10/29 15:27:42 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:27:51 ossec-syscheckd: socket busy ..
2009/10/29 15:28:01 ossec-syscheckd: socket busy ..
2009/10/29 15:28:01 ossec-syscheckd: socketerr (not available).
2009/10/29 15:28:01 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:28:10 ossec-syscheckd: socket busy ..
2009/10/29 15:28:20 ossec-syscheckd: socket busy ..
2009/10/29 15:28:20 ossec-syscheckd: socketerr (not available).
2009/10/29 15:28:20 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:28:29 ossec-syscheckd: socket busy ..
2009/10/29 15:28:39 ossec-syscheckd: socket busy ..
2009/10/29 15:28:39 ossec-syscheckd: socketerr (not available).
2009/10/29 15:28:39 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:28:48 ossec-logcollector: socketerr (not available).
2009/10/29 15:28:48 ossec-syscheckd: socket busy ..
2009/10/29 15:28:58 ossec-syscheckd: socket busy ..
2009/10/29 15:29:00 ossec-syscheckd: socketerr (not available).
2009/10/29 15:29:00 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:29:09 ossec-syscheckd: socket busy ..
2009/10/29 15:29:19 ossec-syscheckd: socket busy ..
2009/10/29 15:29:19 ossec-syscheckd: socketerr (not available).
2009/10/29 15:29:19 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:29:28 ossec-syscheckd: socket busy ..
2009/10/29 15:29:38 ossec-syscheckd: socket busy ..
2009/10/29 15:29:38 ossec-syscheckd: socketerr (not available).
2009/10/29 15:29:38 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:29:47 ossec-syscheckd: socket busy ..
2009/10/29 15:29:57 ossec-syscheckd: socket busy ..
2009/10/29 15:29:57 ossec-syscheckd: socketerr (not available).
2009/10/29 15:29:57 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:30:06 ossec-syscheckd: socket busy ..
2009/10/29 15:30:16 ossec-syscheckd: socket busy ..
2009/10/29 15:30:16 ossec-syscheckd: socketerr (not available).
2009/10/29 15:30:16 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:30:25 ossec-syscheckd: socket busy ..
2009/10/29 15:30:35 ossec-syscheckd: socket busy ..
2009/10/29 15:30:35 ossec-syscheckd: socketerr (not available).
2009/10/29 15:30:35 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:30:44 ossec-syscheckd: socket busy ..
2009/10/29 15:30:54 ossec-syscheckd: socket busy ..
2009/10/29 15:30:54 ossec-syscheckd: socketerr (not available).
2009/10/29 15:30:54 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:30:58 ossec-logcollector: socketerr (not available).
2009/10/29 15:31:03 ossec-syscheckd: socket busy ..
2009/10/29 15:31:13 ossec-syscheckd: socket busy ..
2009/10/29 15:31:13 ossec-syscheckd: socketerr (not available).
2009/10/29 15:31:13 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:31:23 ossec-syscheckd: socket busy ..
2009/10/29 15:31:33 ossec-syscheckd: socket busy ..
2009/10/29 15:31:33 ossec-syscheckd: socketerr (not available).
2009/10/29 15:31:33 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:31:42 ossec-syscheckd: socket busy ..
2009/10/29 15:31:52 ossec-syscheckd: socket busy ..
2009/10/29 15:31:52 ossec-syscheckd: socketerr (not available).
2009/10/29 15:31:52 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:32:01 ossec-syscheckd: socket busy ..
2009/10/29 15:32:11 ossec-syscheckd: socket busy ..
2009/10/29 15:32:11 ossec-syscheckd: socketerr (not available).
2009/10/29 15:32:11 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:32:20 ossec-syscheckd: socket busy ..
2009/10/29 15:32:30 ossec-syscheckd: socket busy ..
2009/10/29 15:32:30 ossec-syscheckd: socketerr (not available).
2009/10/29 15:32:30 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:32:39 ossec-syscheckd: socket busy ..
2009/10/29 15:32:49 ossec-syscheckd: socket busy ..
2009/10/29 15:32:49 ossec-syscheckd: socketerr (not available).
2009/10/29 15:32:49 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:32:58 ossec-syscheckd: socket busy ..
2009/10/29 15:33:08 ossec-syscheckd: socket busy ..
2009/10/29 15:33:08 ossec-syscheckd: socketerr (not available).
2009/10/29 15:33:08 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:33:09 ossec-logcollector: socketerr (not available).
2009/10/29 15:33:17 ossec-syscheckd: socket busy ..
2009/10/29 15:33:27 ossec-syscheckd: socket busy ..
2009/10/29 15:33:27 ossec-syscheckd: socketerr (not available).
2009/10/29 15:33:27 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:33:36 ossec-syscheckd: socket busy ..
2009/10/29 15:33:46 ossec-syscheckd: socket busy ..
2009/10/29 15:33:48 ossec-syscheckd: socketerr (not available).
2009/10/29 15:33:48 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:33:57 ossec-syscheckd: socket busy ..
2009/10/29 15:34:07 ossec-syscheckd: socket busy ..
2009/10/29 15:34:07 ossec-syscheckd: socketerr (not available).
2009/10/29 15:34:07 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:34:16 ossec-syscheckd: socket busy ..
2009/10/29 15:34:17 ossec-analysisd(1226): ERROR: Error reading XML
file '/etc/decoder.xml': XMLERR: File '/etc/decoder.xml' not found.
(line 64).
2009/10/29 15:34:17 ossec-analysisd(1202): ERROR: Configuration error
at '/etc/decoder.xml'. Exiting.
2009/10/29 15:34:26 ossec-syscheckd: socket busy ..
2009/10/29 15:34:26 ossec-syscheckd: socketerr (not available).
2009/10/29 15:34:26 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:34:35 ossec-syscheckd: socket busy ..
2009/10/29 15:34:45 ossec-syscheckd: socket busy ..
2009/10/29 15:34:45 ossec-syscheckd: socketerr (not available).
2009/10/29 15:34:45 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:34:54 ossec-syscheckd: socket busy ..
2009/10/29 15:35:04 ossec-syscheckd: socket busy ..
2009/10/29 15:35:04 ossec-syscheckd: socketerr (not available).
2009/10/29 15:35:04 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:35:13 ossec-syscheckd: socket busy ..
2009/10/29 15:35:20 ossec-logcollector: socketerr (not available).
2009/10/29 15:35:23 ossec-syscheckd: socket busy ..
2009/10/29 15:35:23 ossec-syscheckd: socketerr (not available).
2009/10/29 15:35:23 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:35:32 ossec-syscheckd: socket busy ..
2009/10/29 15:35:42 ossec-syscheckd: socket busy ..
2009/10/29 15:35:42 ossec-syscheckd: socketerr (not available).
2009/10/29 15:35:42 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:35:51 ossec-syscheckd: socket busy ..
2009/10/29 15:36:01 ossec-syscheckd: socket busy ..
2009/10/29 15:36:01 ossec-syscheckd: socketerr (not available).
2009/10/29 15:36:01 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:36:10 ossec-syscheckd: socket busy ..
2009/10/29 15:36:20 ossec-syscheckd: socket busy ..
2009/10/29 15:36:20 ossec-syscheckd: socketerr (not available).
2009/10/29 15:36:20 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:36:29 ossec-syscheckd: socket busy ..
2009/10/29 15:36:39 ossec-syscheckd: socket busy ..
2009/10/29 15:36:39 ossec-syscheckd: socketerr (not available).
2009/10/29 15:36:39 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:36:48 ossec-syscheckd: socket busy ..
2009/10/29 15:36:58 ossec-syscheckd: socket busy ..
2009/10/29 15:36:58 ossec-syscheckd: socketerr (not available).
2009/10/29 15:36:58 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:37:07 ossec-syscheckd: socket busy ..
2009/10/29 15:37:17 ossec-syscheckd: socket busy ..
2009/10/29 15:37:17 ossec-syscheckd: socketerr (not available).
2009/10/29 15:37:17 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:37:26 ossec-syscheckd: socket busy ..
2009/10/29 15:37:30 ossec-logcollector: socketerr (not available).
2009/10/29 15:37:36 ossec-syscheckd: socket busy ..
2009/10/29 15:37:36 ossec-syscheckd: socketerr (not available).
2009/10/29 15:37:36 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:37:45 ossec-syscheckd: socket busy ..
2009/10/29 15:37:55 ossec-syscheckd: socket busy ..
2009/10/29 15:37:55 ossec-syscheckd: socketerr (not available).
2009/10/29 15:37:55 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:38:04 ossec-syscheckd: socket busy ..
2009/10/29 15:38:14 ossec-syscheckd: socket busy ..
2009/10/29 15:38:14 ossec-syscheckd: socketerr (not available).
2009/10/29 15:38:14 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:38:23 ossec-syscheckd: socket busy ..
2009/10/29 15:38:33 ossec-syscheckd: socket busy ..
2009/10/29 15:38:35 ossec-syscheckd: socketerr (not available).
2009/10/29 15:38:35 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:38:44 ossec-syscheckd: socket busy ..
2009/10/29 15:38:54 ossec-syscheckd: socket busy ..
2009/10/29 15:38:54 ossec-syscheckd: socketerr (not available).
2009/10/29 15:38:54 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:39:03 ossec-syscheckd: socket busy ..
2009/10/29 15:39:14 ossec-syscheckd: socket busy ..
2009/10/29 15:39:14 ossec-syscheckd: socketerr (not available).
2009/10/29 15:39:14 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:39:23 ossec-syscheckd: socket busy ..
2009/10/29 15:39:33 ossec-syscheckd: socket busy ..
2009/10/29 15:39:33 ossec-syscheckd: socketerr (not available).
2009/10/29 15:39:33 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:39:41 ossec-logcollector: socketerr (not available).
2009/10/29 15:39:42 ossec-syscheckd: socket busy ..
2009/10/29 15:39:52 ossec-syscheckd: socket busy ..
2009/10/29 15:39:52 ossec-syscheckd: socketerr (not available).
2009/10/29 15:39:52 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:40:01 ossec-syscheckd: socket busy ..
2009/10/29 15:40:11 ossec-syscheckd: socket busy ..
2009/10/29 15:40:11 ossec-syscheckd: socketerr (not available).
2009/10/29 15:40:11 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:40:20 ossec-syscheckd: socket busy ..
2009/10/29 15:40:30 ossec-syscheckd: socket busy ..
2009/10/29 15:40:30 ossec-syscheckd: socketerr (not available).
2009/10/29 15:40:30 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:40:39 ossec-syscheckd: socket busy ..
2009/10/29 15:40:49 ossec-syscheckd: socket busy ..
2009/10/29 15:40:49 ossec-syscheckd: socketerr (not available).
2009/10/29 15:40:49 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:40:58 ossec-syscheckd: socket busy ..
2009/10/29 15:41:08 ossec-syscheckd: socket busy ..
2009/10/29 15:41:08 ossec-syscheckd: socketerr (not available).
2009/10/29 15:41:08 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:41:17 ossec-syscheckd: socket busy ..
2009/10/29 15:41:27 ossec-syscheckd: socket busy ..
2009/10/29 15:41:27 ossec-syscheckd: socketerr (not available).
2009/10/29 15:41:27 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:41:36 ossec-syscheckd: socket busy ..
2009/10/29 15:41:46 ossec-syscheckd: socket busy ..
2009/10/29 15:41:46 ossec-syscheckd: socketerr (not available).
2009/10/29 15:41:46 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:41:52 ossec-logcollector: socketerr (not available).
2009/10/29 15:41:55 ossec-syscheckd: socket busy ..
2009/10/29 15:42:05 ossec-syscheckd: socket busy ..
2009/10/29 15:42:05 ossec-syscheckd: socketerr (not available).
2009/10/29 15:42:05 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:42:14 ossec-syscheckd: socket busy ..
2009/10/29 15:42:24 ossec-syscheckd: socket busy ..
2009/10/29 15:42:24 ossec-syscheckd: socketerr (not available).
2009/10/29 15:42:24 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:42:33 ossec-syscheckd: socket busy ..
2009/10/29 15:42:43 ossec-syscheckd: socket busy ..
2009/10/29 15:42:43 ossec-syscheckd: socketerr (not available).
2009/10/29 15:42:43 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:42:52 ossec-syscheckd: socket busy ..
2009/10/29 15:43:02 ossec-syscheckd: socket busy ..
2009/10/29 15:43:02 ossec-syscheckd: socketerr (not available).
2009/10/29 15:43:02 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:43:11 ossec-syscheckd: socket busy ..
2009/10/29 15:43:21 ossec-syscheckd: socket busy ..
2009/10/29 15:43:23 ossec-syscheckd: socketerr (not available).
2009/10/29 15:43:23 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:43:32 ossec-syscheckd: socket busy ..
2009/10/29 15:43:42 ossec-syscheckd: socket busy ..
2009/10/29 15:43:42 ossec-syscheckd: socketerr (not available).
2009/10/29 15:43:42 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:43:51 ossec-syscheckd: socket busy ..
2009/10/29 15:44:01 ossec-syscheckd: socket busy ..
2009/10/29 15:44:01 ossec-syscheckd: socketerr (not available).
2009/10/29 15:44:01 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:44:02 ossec-logcollector: socketerr (not available).
2009/10/29 15:44:10 ossec-syscheckd: socket busy ..
2009/10/29 15:44:20 ossec-syscheckd: socket busy ..
2009/10/29 15:44:20 ossec-syscheckd: socketerr (not available).
2009/10/29 15:44:20 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:44:29 ossec-syscheckd: socket busy ..
2009/10/29 15:44:39 ossec-syscheckd: socket busy ..
2009/10/29 15:44:39 ossec-syscheckd: socketerr (not available).
2009/10/29 15:44:39 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:44:48 ossec-syscheckd: socket busy ..
2009/10/29 15:44:58 ossec-syscheckd: socket busy ..
2009/10/29 15:44:58 ossec-syscheckd: socketerr (not available).
2009/10/29 15:44:58 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:45:07 ossec-syscheckd: socket busy ..
2009/10/29 15:45:17 ossec-syscheckd: socket busy ..
2009/10/29 15:45:17 ossec-syscheckd: socketerr (not available).
2009/10/29 15:45:17 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:45:26 ossec-syscheckd: socket busy ..
2009/10/29 15:45:36 ossec-syscheckd: socket busy ..
2009/10/29 15:45:36 ossec-syscheckd: socketerr (not available).
2009/10/29 15:45:36 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:45:45 ossec-syscheckd: socket busy ..
2009/10/29 15:45:55 ossec-syscheckd: socket busy ..
2009/10/29 15:45:55 ossec-syscheckd: socketerr (not available).
2009/10/29 15:45:55 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:46:04 ossec-syscheckd: socket busy ..
2009/10/29 15:46:13 ossec-logcollector: socketerr (not available).
2009/10/29 15:46:14 ossec-syscheckd: socket busy ..
2009/10/29 15:46:14 ossec-syscheckd: socketerr (not available).
2009/10/29 15:46:14 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:46:23 ossec-syscheckd: socket busy ..
2009/10/29 15:46:33 ossec-syscheckd: socket busy ..
2009/10/29 15:46:33 ossec-syscheckd: socketerr (not available).
2009/10/29 15:46:33 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:46:42 ossec-syscheckd: socket busy ..
2009/10/29 15:46:52 ossec-syscheckd: socket busy ..
2009/10/29 15:46:52 ossec-syscheckd: socketerr (not available).
2009/10/29 15:46:52 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:47:02 ossec-syscheckd: socket busy ..
2009/10/29 15:47:12 ossec-syscheckd: socket busy ..
2009/10/29 15:47:12 ossec-syscheckd: socketerr (not available).
2009/10/29 15:47:12 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:47:21 ossec-syscheckd: socket busy ..
2009/10/29 15:47:31 ossec-syscheckd: socket busy ..
2009/10/29 15:47:31 ossec-syscheckd: socketerr (not available).
2009/10/29 15:47:31 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:47:40 ossec-syscheckd: socket busy ..
2009/10/29 15:47:50 ossec-syscheckd: socket busy ..
2009/10/29 15:47:50 ossec-syscheckd: socketerr (not available).
2009/10/29 15:47:50 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:47:59 ossec-syscheckd: socket busy ..
2009/10/29 15:48:09 ossec-syscheckd: socket busy ..
2009/10/29 15:48:11 ossec-syscheckd: socketerr (not available).
2009/10/29 15:48:11 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:48:20 ossec-syscheckd: socket busy ..
2009/10/29 15:48:24 ossec-logcollector: socketerr (not available).
2009/10/29 15:48:30 ossec-syscheckd: socket busy ..
2009/10/29 15:48:30 ossec-syscheckd: socketerr (not available).
2009/10/29 15:48:30 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:48:39 ossec-syscheckd: socket busy ..
2009/10/29 15:48:49 ossec-syscheckd: socket busy ..
2009/10/29 15:48:49 ossec-syscheckd: socketerr (not available).
2009/10/29 15:48:49 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:48:58 ossec-syscheckd: socket busy ..
2009/10/29 15:49:08 ossec-syscheckd: socket busy ..
2009/10/29 15:49:08 ossec-syscheckd: socketerr (not available).
2009/10/29 15:49:08 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:49:17 ossec-syscheckd: socket busy ..
2009/10/29 15:49:27 ossec-syscheckd: socket busy ..
2009/10/29 15:49:27 ossec-syscheckd: socketerr (not available).
2009/10/29 15:49:27 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:49:36 ossec-logcollector(1225): INFO: SIGNAL Received.
Exit Cleaning...
2009/10/29 15:49:36 ossec-syscheckd(1225): INFO: SIGNAL Received. Exit
Cleaning...
2009/10/29 15:49:36 ossec-agentd(1225): INFO: SIGNAL Received. Exit
Cleaning...
2009/10/29 15:49:36 ossec-execd(1314): INFO: Shutdown received.
Deleting responses.
2009/10/29 15:49:36 ossec-execd(1225): INFO: SIGNAL Received. Exit
Cleaning...
2009/10/29 15:49:41 ossec-execd: INFO: Started (pid: 26213).
2009/10/29 15:49:41 ossec-agentd(1410): INFO: Reading authentication
keys file.
2009/10/29 15:49:41 ossec-agentd: INFO: No previous counter available
for 'm87s00'.
2009/10/29 15:49:41 ossec-agentd: INFO: Assigning counter for agent
m87s00: '0:0'.
2009/10/29 15:49:41 ossec-agentd: INFO: Assigning sender counter: 0:20
2009/10/29 15:49:41 ossec-agentd: INFO: Started (pid: 26217).
2009/10/29 15:49:41 ossec-agentd: INFO: Server IP Address:
10.99.254.31
2009/10/29 15:49:41 ossec-agentd: INFO: Trying to connect to server
(10.99.254.31:1514).
2009/10/29 15:49:41 ossec-agentd(4102): INFO: Connected to the server
(10.99.254.31:1514).
2009/10/29 15:49:45 ossec-syscheckd: INFO: Started (pid: 26225).
2009/10/29 15:49:45 ossec-rootcheck: INFO: Started (pid: 26225).
2009/10/29 15:49:45 ossec-syscheckd: INFO: Monitoring directory: '/
etc'.
2009/10/29 15:49:45 ossec-syscheckd: INFO: Monitoring directory: '/usr/
bin'.
2009/10/29 15:49:45 ossec-syscheckd: INFO: Monitoring directory: '/usr/
sbin'.
2009/10/29 15:49:45 ossec-syscheckd: INFO: Monitoring directory: '/
bin'.
2009/10/29 15:49:45 ossec-syscheckd: INFO: Monitoring directory: '/
sbin'.
2009/10/29 15:49:47 ossec-logcollector(1950): INFO: Analyzing file: '/
var/adm/syslog'.
2009/10/29 15:49:47 ossec-logcollector(1950): INFO: Analyzing file: '/
var/adm/syslog/syslog.log'.
2009/10/29 15:49:47 ossec-logcollector: INFO: Started (pid: 26221).
2009/10/29 15:50:17 ossec-syscheckd: INFO: Starting syscheck database
(pre-scan).
2009/10/29 15:54:20 ossec-syscheckd: INFO: Finished creating syscheck
database (pre-scan completed).
2009/10/29 15:56:20 ossec-syscheckd: INFO: Starting syscheck scan
(forwarding database).
2009/10/29 15:56:48 ossec-syscheckd: socket busy ..
2009/10/29 15:56:58 ossec-syscheckd: socket busy ..
2009/10/29 15:56:58 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:57:07 ossec-syscheckd: socket busy ..
2009/10/29 15:57:17 ossec-syscheckd: socket busy ..
2009/10/29 15:57:17 ossec-syscheckd: socketerr (not available).
2009/10/29 15:57:17 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:57:26 ossec-syscheckd: socket busy ..
2009/10/29 15:57:36 ossec-syscheckd: socket busy ..
2009/10/29 15:57:36 ossec-syscheckd: socketerr (not available).
2009/10/29 15:57:36 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:57:45 ossec-syscheckd: socket busy ..
2009/10/29 15:57:55 ossec-syscheckd: socket busy ..
2009/10/29 15:57:55 ossec-syscheckd: socketerr (not available).
2009/10/29 15:57:55 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:58:04 ossec-syscheckd: socket busy ..
2009/10/29 15:58:14 ossec-syscheckd: socket busy ..
2009/10/29 15:58:14 ossec-syscheckd: socketerr (not available).
2009/10/29 15:58:14 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:58:23 ossec-syscheckd: socket busy ..
2009/10/29 15:58:33 ossec-syscheckd: socket busy ..
2009/10/29 15:58:33 ossec-syscheckd: socketerr (not available).
2009/10/29 15:58:33 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:58:42 ossec-syscheckd: socket busy ..
2009/10/29 15:58:52 ossec-syscheckd: socket busy ..
2009/10/29 15:58:54 ossec-syscheckd: socketerr (not available).
2009/10/29 15:58:54 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:59:03 ossec-syscheckd: socket busy ..
2009/10/29 15:59:13 ossec-syscheckd: socket busy ..
2009/10/29 15:59:13 ossec-syscheckd: socketerr (not available).
2009/10/29 15:59:13 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:59:22 ossec-syscheckd: socket busy ..
2009/10/29 15:59:32 ossec-syscheckd: socket busy ..
2009/10/29 15:59:32 ossec-syscheckd: socketerr (not available).
2009/10/29 15:59:32 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 15:59:41 ossec-syscheckd: socket busy ..
2009/10/29 15:59:51 ossec-syscheckd: socket busy ..
2009/10/29 15:59:51 ossec-syscheckd: socketerr (not available).
2009/10/29 15:59:51 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:00:00 ossec-syscheckd: socket busy ..
2009/10/29 16:00:10 ossec-syscheckd: socket busy ..
2009/10/29 16:00:10 ossec-syscheckd: socketerr (not available).
2009/10/29 16:00:10 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:00:19 ossec-syscheckd: socket busy ..
2009/10/29 16:00:29 ossec-syscheckd: socket busy ..
2009/10/29 16:00:29 ossec-syscheckd: socketerr (not available).
2009/10/29 16:00:29 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:00:38 ossec-syscheckd: socket busy ..
2009/10/29 16:00:48 ossec-syscheckd: socket busy ..
2009/10/29 16:00:48 ossec-syscheckd: socketerr (not available).
2009/10/29 16:00:48 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:00:49 ossec-logcollector: socket busy ..
2009/10/29 16:00:57 ossec-syscheckd: socket busy ..
2009/10/29 16:00:59 ossec-logcollector: socket busy ..
2009/10/29 16:01:07 ossec-syscheckd: socket busy ..
2009/10/29 16:01:07 ossec-syscheckd: socketerr (not available).
2009/10/29 16:01:07 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:01:16 ossec-syscheckd: socket busy ..
2009/10/29 16:01:26 ossec-syscheckd: socket busy ..
2009/10/29 16:01:26 ossec-syscheckd: socketerr (not available).
2009/10/29 16:01:26 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:01:35 ossec-syscheckd: socket busy ..
2009/10/29 16:01:45 ossec-syscheckd: socket busy ..
2009/10/29 16:01:45 ossec-syscheckd: socketerr (not available).
2009/10/29 16:01:45 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:01:54 ossec-syscheckd: socket busy ..
2009/10/29 16:02:04 ossec-syscheckd: socket busy ..
2009/10/29 16:02:04 ossec-syscheckd: socketerr (not available).
2009/10/29 16:02:04 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:02:13 ossec-syscheckd: socket busy ..
2009/10/29 16:02:23 ossec-syscheckd: socket busy ..
2009/10/29 16:02:23 ossec-syscheckd: socketerr (not available).
2009/10/29 16:02:23 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:02:32 ossec-syscheckd: socket busy ..
2009/10/29 16:02:42 ossec-syscheckd: socket busy ..
2009/10/29 16:02:42 ossec-syscheckd: socketerr (not available).
2009/10/29 16:02:42 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:02:51 ossec-syscheckd: socket busy ..
2009/10/29 16:03:01 ossec-syscheckd: socket busy ..
2009/10/29 16:03:01 ossec-syscheckd: socketerr (not available).
2009/10/29 16:03:01 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:03:10 ossec-logcollector: socketerr (not available).
2009/10/29 16:03:10 ossec-syscheckd: socket busy ..
2009/10/29 16:03:21 ossec-syscheckd: socket busy ..
2009/10/29 16:03:21 ossec-syscheckd: socketerr (not available).
2009/10/29 16:03:21 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:03:30 ossec-syscheckd: socket busy ..
2009/10/29 16:03:40 ossec-syscheckd: socket busy ..
2009/10/29 16:03:42 ossec-syscheckd: socketerr (not available).
2009/10/29 16:03:42 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:03:51 ossec-syscheckd: socket busy ..
2009/10/29 16:04:01 ossec-syscheckd: socket busy ..
2009/10/29 16:04:01 ossec-syscheckd: socketerr (not available).
2009/10/29 16:04:01 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:04:10 ossec-syscheckd: socket busy ..
2009/10/29 16:04:20 ossec-syscheckd: socket busy ..
2009/10/29 16:04:20 ossec-syscheckd: socketerr (not available).
2009/10/29 16:04:20 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:04:29 ossec-syscheckd: socket busy ..
2009/10/29 16:04:39 ossec-syscheckd: socket busy ..
2009/10/29 16:04:39 ossec-syscheckd: socketerr (not available).
2009/10/29 16:04:39 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:04:48 ossec-syscheckd: socket busy ..
2009/10/29 16:04:58 ossec-syscheckd: socket busy ..
2009/10/29 16:04:58 ossec-syscheckd: socketerr (not available).
2009/10/29 16:04:58 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:05:07 ossec-syscheckd: socket busy ..
2009/10/29 16:05:17 ossec-syscheckd: socket busy ..
2009/10/29 16:05:17 ossec-syscheckd: socketerr (not available).
2009/10/29 16:05:17 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:05:20 ossec-logcollector: socketerr (not available).
2009/10/29 16:05:26 ossec-syscheckd: socket busy ..
2009/10/29 16:05:36 ossec-syscheckd: socket busy ..
2009/10/29 16:05:36 ossec-syscheckd: socketerr (not available).
2009/10/29 16:05:36 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:05:42 ossec-logcollector: socketerr (not available).
2009/10/29 16:05:42 ossec-logcollector(1224): ERROR: Error sending
message to queue.
2009/10/29 16:05:45 ossec-syscheckd: socket busy ..
2009/10/29 16:05:55 ossec-syscheckd: socket busy ..
2009/10/29 16:05:55 ossec-syscheckd: socketerr (not available).
2009/10/29 16:05:55 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:06:04 ossec-syscheckd: socket busy ..
2009/10/29 16:06:14 ossec-syscheckd: socket busy ..
2009/10/29 16:06:14 ossec-syscheckd: socketerr (not available).
2009/10/29 16:06:14 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:06:23 ossec-syscheckd: socket busy ..
2009/10/29 16:06:33 ossec-syscheckd: socket busy ..
2009/10/29 16:06:33 ossec-syscheckd: socketerr (not available).
2009/10/29 16:06:33 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:06:42 ossec-syscheckd: socket busy ..
2009/10/29 16:06:52 ossec-syscheckd: socket busy ..
2009/10/29 16:06:52 ossec-syscheckd: socketerr (not available).
2009/10/29 16:06:52 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:07:01 ossec-syscheckd: socket busy ..
2009/10/29 16:07:11 ossec-syscheckd: socket busy ..
2009/10/29 16:07:11 ossec-syscheckd: socketerr (not available).
2009/10/29 16:07:11 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:07:20 ossec-syscheckd: socket busy ..
2009/10/29 16:07:30 ossec-syscheckd: socket busy ..
2009/10/29 16:07:30 ossec-syscheckd: socketerr (not available).
2009/10/29 16:07:30 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:07:39 ossec-syscheckd: socket busy ..
2009/10/29 16:07:40 ossec-logcollector: socket busy ..
2009/10/29 16:07:49 ossec-syscheckd: socket busy ..
2009/10/29 16:07:49 ossec-syscheckd: socketerr (not available).
2009/10/29 16:07:49 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:07:50 ossec-logcollector: socket busy ..
2009/10/29 16:07:58 ossec-syscheckd: socket busy ..
2009/10/29 16:08:08 ossec-syscheckd: socket busy ..
2009/10/29 16:08:08 ossec-syscheckd: socketerr (not available).
2009/10/29 16:08:08 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:08:17 ossec-syscheckd: socket busy ..
2009/10/29 16:08:27 ossec-syscheckd: socket busy ..
2009/10/29 16:08:29 ossec-syscheckd: socketerr (not available).
2009/10/29 16:08:29 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:08:38 ossec-syscheckd: socket busy ..
2009/10/29 16:08:48 ossec-syscheckd: socket busy ..
2009/10/29 16:08:48 ossec-syscheckd: socketerr (not available).
2009/10/29 16:08:48 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:08:57 ossec-syscheckd: socket busy ..
2009/10/29 16:09:07 ossec-syscheckd: socket busy ..
2009/10/29 16:09:07 ossec-syscheckd: socketerr (not available).
2009/10/29 16:09:07 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:09:16 ossec-syscheckd: socket busy ..
2009/10/29 16:09:26 ossec-syscheckd: socket busy ..
2009/10/29 16:09:26 ossec-syscheckd: socketerr (not available).
2009/10/29 16:09:26 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:09:35 ossec-syscheckd: socket busy ..
2009/10/29 16:09:45 ossec-syscheckd: socket busy ..
2009/10/29 16:09:45 ossec-syscheckd: socketerr (not available).
2009/10/29 16:09:45 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:09:54 ossec-syscheckd: socket busy ..
2009/10/29 16:10:01 ossec-logcollector: socketerr (not available).
2009/10/29 16:10:04 ossec-syscheckd: socket busy ..
2009/10/29 16:10:04 ossec-syscheckd: socketerr (not available).
2009/10/29 16:10:04 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:10:13 ossec-syscheckd: socket busy ..
2009/10/29 16:10:23 ossec-syscheckd: socket busy ..
2009/10/29 16:10:23 ossec-syscheckd: socketerr (not available).
2009/10/29 16:10:23 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:10:32 ossec-syscheckd: socket busy ..
2009/10/29 16:10:43 ossec-syscheckd: socket busy ..
2009/10/29 16:10:43 ossec-syscheckd: socketerr (not available).
2009/10/29 16:10:43 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:10:52 ossec-syscheckd: socket busy ..
2009/10/29 16:11:02 ossec-syscheckd: socket busy ..
2009/10/29 16:11:02 ossec-syscheckd: socketerr (not available).
2009/10/29 16:11:02 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:11:11 ossec-syscheckd: socket busy ..
2009/10/29 16:11:21 ossec-syscheckd: socket busy ..
2009/10/29 16:11:21 ossec-syscheckd: socketerr (not available).
2009/10/29 16:11:21 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:11:30 ossec-syscheckd: socket busy ..
2009/10/29 16:11:40 ossec-syscheckd: socket busy ..
2009/10/29 16:11:40 ossec-syscheckd: socketerr (not available).
2009/10/29 16:11:40 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:11:49 ossec-syscheckd: socket busy ..
2009/10/29 16:11:59 ossec-syscheckd: socket busy ..
2009/10/29 16:11:59 ossec-syscheckd: socketerr (not available).
2009/10/29 16:11:59 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:12:08 ossec-syscheckd: socket busy ..
2009/10/29 16:12:11 ossec-logcollector: socketerr (not available).
2009/10/29 16:12:18 ossec-syscheckd: socket busy ..
2009/10/29 16:12:18 ossec-syscheckd: socketerr (not available).
2009/10/29 16:12:18 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:12:27 ossec-syscheckd: socket busy ..
2009/10/29 16:12:37 ossec-syscheckd: socket busy ..
2009/10/29 16:12:37 ossec-syscheckd: socketerr (not available).
2009/10/29 16:12:37 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:12:46 ossec-syscheckd: socket busy ..
2009/10/29 16:12:56 ossec-syscheckd: socket busy ..
2009/10/29 16:12:56 ossec-syscheckd: socketerr (not available).
2009/10/29 16:12:56 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:13:05 ossec-syscheckd: socket busy ..
2009/10/29 16:13:15 ossec-syscheckd: socket busy ..
2009/10/29 16:13:17 ossec-syscheckd: socketerr (not available).
2009/10/29 16:13:17 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:13:26 ossec-syscheckd: socket busy ..
2009/10/29 16:13:36 ossec-syscheckd: socket busy ..
2009/10/29 16:13:36 ossec-syscheckd: socketerr (not available).
2009/10/29 16:13:36 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:13:45 ossec-syscheckd: socket busy ..
2009/10/29 16:13:55 ossec-syscheckd: socket busy ..
2009/10/29 16:13:55 ossec-syscheckd: socketerr (not available).
2009/10/29 16:13:55 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:14:04 ossec-syscheckd: socket busy ..
2009/10/29 16:14:14 ossec-syscheckd: socket busy ..
2009/10/29 16:14:14 ossec-syscheckd: socketerr (not available).
2009/10/29 16:14:14 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:14:20 ossec-logcollector: socketerr (not available).
2009/10/29 16:14:20 ossec-logcollector(1224): ERROR: Error sending
message to queue.
2009/10/29 16:14:23 ossec-syscheckd: socket busy ..
2009/10/29 16:14:31 ossec-logcollector: socket busy ..
2009/10/29 16:14:33 ossec-syscheckd: socket busy ..
2009/10/29 16:14:33 ossec-syscheckd: socketerr (not available).
2009/10/29 16:14:33 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:14:41 ossec-logcollector: socket busy ..
2009/10/29 16:14:42 ossec-syscheckd: socket busy ..
2009/10/29 16:14:52 ossec-syscheckd: socket busy ..
2009/10/29 16:14:52 ossec-syscheckd: socketerr (not available).
2009/10/29 16:14:52 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:15:01 ossec-syscheckd: socket busy ..
2009/10/29 16:15:11 ossec-syscheckd: socket busy ..
2009/10/29 16:15:11 ossec-syscheckd: socketerr (not available).
2009/10/29 16:15:11 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:15:20 ossec-syscheckd: socket busy ..
2009/10/29 16:15:30 ossec-syscheckd: socket busy ..
2009/10/29 16:15:30 ossec-syscheckd: socketerr (not available).
2009/10/29 16:15:30 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:15:39 ossec-syscheckd: socket busy ..
2009/10/29 16:15:49 ossec-syscheckd: socket busy ..
2009/10/29 16:15:49 ossec-syscheckd: socketerr (not available).
2009/10/29 16:15:49 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:15:58 ossec-syscheckd: socket busy ..
2009/10/29 16:16:08 ossec-syscheckd: socket busy ..
2009/10/29 16:16:08 ossec-syscheckd: socketerr (not available).
2009/10/29 16:16:08 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:16:17 ossec-syscheckd: socket busy ..
2009/10/29 16:16:27 ossec-syscheckd: socket busy ..
2009/10/29 16:16:27 ossec-syscheckd: socketerr (not available).
2009/10/29 16:16:27 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:16:36 ossec-syscheckd: socket busy ..
2009/10/29 16:16:46 ossec-syscheckd: socket busy ..
2009/10/29 16:16:46 ossec-syscheckd: socketerr (not available).
2009/10/29 16:16:46 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:16:52 ossec-logcollector: socketerr (not available).
2009/10/29 16:16:55 ossec-syscheckd: socket busy ..
2009/10/29 16:17:05 ossec-syscheckd: socket busy ..
2009/10/29 16:17:05 ossec-syscheckd: socketerr (not available).
2009/10/29 16:17:05 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:17:14 ossec-syscheckd: socket busy ..
2009/10/29 16:17:24 ossec-syscheckd: socket busy ..
2009/10/29 16:17:24 ossec-syscheckd: socketerr (not available).
2009/10/29 16:17:24 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:17:34 ossec-syscheckd: socket busy ..
2009/10/29 16:17:44 ossec-syscheckd: socket busy ..
2009/10/29 16:17:44 ossec-syscheckd: socketerr (not available).
2009/10/29 16:17:44 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:17:53 ossec-syscheckd: socket busy ..
2009/10/29 16:18:03 ossec-syscheckd: socket busy ..
2009/10/29 16:18:05 ossec-syscheckd: socketerr (not available).
2009/10/29 16:18:05 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:18:14 ossec-syscheckd: socket busy ..
2009/10/29 16:18:24 ossec-syscheckd: socket busy ..
2009/10/29 16:18:24 ossec-syscheckd: socketerr (not available).
2009/10/29 16:18:24 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:18:33 ossec-syscheckd: socket busy ..
2009/10/29 16:18:43 ossec-syscheckd: socket busy ..
2009/10/29 16:18:43 ossec-syscheckd: socketerr (not available).
2009/10/29 16:18:43 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:18:52 ossec-syscheckd: socket busy ..
2009/10/29 16:19:02 ossec-syscheckd: socket busy ..
2009/10/29 16:19:02 ossec-syscheckd: socketerr (not available).
2009/10/29 16:19:02 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:19:02 ossec-logcollector: socketerr (not available).
2009/10/29 16:19:11 ossec-syscheckd: socket busy ..
2009/10/29 16:19:21 ossec-syscheckd: socket busy ..
2009/10/29 16:19:21 ossec-syscheckd: socketerr (not available).
2009/10/29 16:19:21 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:19:30 ossec-syscheckd: socket busy ..
2009/10/29 16:19:40 ossec-syscheckd: socket busy ..
2009/10/29 16:19:40 ossec-syscheckd: socketerr (not available).
2009/10/29 16:19:40 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:19:49 ossec-syscheckd: socket busy ..
2009/10/29 16:19:59 ossec-syscheckd: socket busy ..
2009/10/29 16:19:59 ossec-syscheckd: socketerr (not available).
2009/10/29 16:19:59 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:20:08 ossec-syscheckd: socket busy ..
2009/10/29 16:20:18 ossec-syscheckd: socket busy ..
2009/10/29 16:20:18 ossec-syscheckd: socketerr (not available).
2009/10/29 16:20:18 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:20:27 ossec-syscheckd: socket busy ..
2009/10/29 16:20:37 ossec-syscheckd: socket busy ..
2009/10/29 16:20:37 ossec-syscheckd: socketerr (not available).
2009/10/29 16:20:37 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:20:46 ossec-syscheckd: socket busy ..
2009/10/29 16:20:56 ossec-syscheckd: socket busy ..
2009/10/29 16:20:56 ossec-syscheckd: socketerr (not available).
2009/10/29 16:20:56 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:21:05 ossec-syscheckd: socket busy ..
2009/10/29 16:21:13 ossec-logcollector: socketerr (not available).
2009/10/29 16:21:15 ossec-syscheckd: socket busy ..
2009/10/29 16:21:15 ossec-syscheckd: socketerr (not available).
2009/10/29 16:21:15 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:21:24 ossec-syscheckd: socket busy ..
2009/10/29 16:21:34 ossec-syscheckd: socket busy ..
2009/10/29 16:21:34 ossec-syscheckd: socketerr (not available).
2009/10/29 16:21:34 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:21:43 ossec-syscheckd: socket busy ..
2009/10/29 16:21:53 ossec-syscheckd: socket busy ..
2009/10/29 16:21:53 ossec-syscheckd: socketerr (not available).
2009/10/29 16:21:53 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:22:02 ossec-syscheckd: socket busy ..
2009/10/29 16:22:12 ossec-syscheckd: socket busy ..
2009/10/29 16:22:12 ossec-syscheckd: socketerr (not available).
2009/10/29 16:22:12 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:22:21 ossec-syscheckd: socket busy ..
2009/10/29 16:22:27 ossec-logcollector: socketerr (not available).
2009/10/29 16:22:27 ossec-logcollector(1224): ERROR: Error sending
message to queue.
2009/10/29 16:22:31 ossec-syscheckd: socket busy ..
2009/10/29 16:22:31 ossec-syscheckd: socketerr (not available).
2009/10/29 16:22:31 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:22:40 ossec-syscheckd: socket busy ..
2009/10/29 16:22:50 ossec-syscheckd: socket busy ..
2009/10/29 16:22:52 ossec-syscheckd: socketerr (not available).
2009/10/29 16:22:52 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:23:01 ossec-syscheckd: socket busy ..
2009/10/29 16:23:11 ossec-syscheckd: socket busy ..
2009/10/29 16:23:11 ossec-syscheckd: socketerr (not available).
2009/10/29 16:23:11 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:23:20 ossec-syscheckd: socket busy ..
2009/10/29 16:23:30 ossec-syscheckd: socket busy ..
2009/10/29 16:23:30 ossec-syscheckd: socketerr (not available).
2009/10/29 16:23:30 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:23:33 ossec-logcollector: socket busy ..
2009/10/29 16:23:39 ossec-syscheckd: socket busy ..
2009/10/29 16:23:43 ossec-logcollector: socket busy ..
2009/10/29 16:23:49 ossec-syscheckd: socket busy ..
2009/10/29 16:23:49 ossec-syscheckd: socketerr (not available).
2009/10/29 16:23:49 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:23:58 ossec-syscheckd: socket busy ..
2009/10/29 16:24:08 ossec-syscheckd: socket busy ..
2009/10/29 16:24:08 ossec-syscheckd: socketerr (not available).
2009/10/29 16:24:08 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:24:17 ossec-syscheckd: socket busy ..
2009/10/29 16:24:27 ossec-syscheckd: socket busy ..
2009/10/29 16:24:27 ossec-syscheckd: socketerr (not available).
2009/10/29 16:24:27 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:24:36 ossec-syscheckd: socket busy ..
2009/10/29 16:24:46 ossec-syscheckd: socket busy ..
2009/10/29 16:24:46 ossec-syscheckd: socketerr (not available).
2009/10/29 16:24:46 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:24:55 ossec-syscheckd: socket busy ..
2009/10/29 16:25:06 ossec-syscheckd: socket busy ..
2009/10/29 16:25:06 ossec-syscheckd: socketerr (not available).
2009/10/29 16:25:06 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:25:15 ossec-syscheckd: socket busy ..
2009/10/29 16:25:25 ossec-syscheckd: socket busy ..
2009/10/29 16:25:25 ossec-syscheckd: socketerr (not available).
2009/10/29 16:25:25 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:25:34 ossec-syscheckd: socket busy ..
2009/10/29 16:25:44 ossec-syscheckd: socket busy ..
2009/10/29 16:25:44 ossec-syscheckd: socketerr (not available).
2009/10/29 16:25:44 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:25:53 ossec-syscheckd: socket busy ..
2009/10/29 16:25:53 ossec-logcollector: socketerr (not available).
2009/10/29 16:26:03 ossec-syscheckd: socket busy ..
2009/10/29 16:26:03 ossec-syscheckd: socketerr (not available).
2009/10/29 16:26:03 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:26:12 ossec-syscheckd: socket busy ..
2009/10/29 16:26:22 ossec-syscheckd: socket busy ..
2009/10/29 16:26:22 ossec-syscheckd: socketerr (not available).
2009/10/29 16:26:22 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:26:31 ossec-syscheckd: socket busy ..
2009/10/29 16:26:41 ossec-syscheckd: socket busy ..
2009/10/29 16:26:41 ossec-syscheckd: socketerr (not available).
2009/10/29 16:26:41 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:26:50 ossec-syscheckd: socket busy ..
2009/10/29 16:27:00 ossec-syscheckd: socket busy ..
2009/10/29 16:27:00 ossec-syscheckd: socketerr (not available).
2009/10/29 16:27:00 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:27:09 ossec-syscheckd: socket busy ..
2009/10/29 16:27:19 ossec-syscheckd: socket busy ..
2009/10/29 16:27:19 ossec-syscheckd: socketerr (not available).
2009/10/29 16:27:19 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:27:28 ossec-syscheckd: socket busy ..
2009/10/29 16:27:38 ossec-syscheckd: socket busy ..
2009/10/29 16:27:40 ossec-syscheckd: socketerr (not available).
2009/10/29 16:27:40 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:27:49 ossec-syscheckd: socket busy ..
2009/10/29 16:27:59 ossec-syscheckd: socket busy ..
2009/10/29 16:27:59 ossec-syscheckd: socketerr (not available).
2009/10/29 16:27:59 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:28:04 ossec-logcollector: socketerr (not available).
2009/10/29 16:28:08 ossec-syscheckd: socket busy ..
2009/10/29 16:28:18 ossec-syscheckd: socket busy ..
2009/10/29 16:28:18 ossec-syscheckd: socketerr (not available).
2009/10/29 16:28:18 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:28:27 ossec-syscheckd: socket busy ..
2009/10/29 16:28:37 ossec-syscheckd: socket busy ..
2009/10/29 16:28:37 ossec-syscheckd: socketerr (not available).
2009/10/29 16:28:37 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:28:46 ossec-syscheckd: socket busy ..
2009/10/29 16:28:56 ossec-syscheckd: socket busy ..
2009/10/29 16:28:56 ossec-syscheckd: socketerr (not available).
2009/10/29 16:28:56 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:29:05 ossec-syscheckd: socket busy ..
2009/10/29 16:29:15 ossec-syscheckd: socket busy ..
2009/10/29 16:29:15 ossec-syscheckd: socketerr (not available).
2009/10/29 16:29:15 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:29:24 ossec-syscheckd: socket busy ..
2009/10/29 16:29:34 ossec-syscheckd: socket busy ..
2009/10/29 16:29:34 ossec-syscheckd: socketerr (not available).
2009/10/29 16:29:34 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/10/29 16:29:43 ossec-syscheckd: socket busy ..
2009/10/29 16:29:53 ossec-syscheckd: socket busy ..
2009/10/29 16:29:53 ossec-syscheckd: socketerr (not available).
2009/10/29 16:29:53 ossec-syscheckd(1224): ERROR: Error sending
message to queue.

[Michael Starks]

Heyzoos wrote:
> # cat /etc/ossec-init.conf
> DIRECTORY="/var/ossec"
> VERSION="v2.2"
> DATE="Thu Oct 29 13:25:52 GMT 2009"
> TYPE="agent"
> # DIRECTORY="/var/ossec"
> # VERSION="v2.2"
> # DATE="Thu Oct 29 13:25:52 GMT 2009"
> # TYPE="agent"
> # # cat /etc/ossec-init.conf
> # DIRECTORY="/var/ossec"
> # VERSION="v2.2"
> # DATE="Thu Oct 29 13:25:52 GMT 2009"
> # TYPE="agent"

Did you choose a server install on the OSSEC manager?

> # netstat -a | grep udp
> udp 0 0 m87s00.54249 10.99.254.31.1514
> udp 0 0 *.2121 *.*
> udp 0 0 *.2148 *.*
> udp 0 0 *.135 *.*
> udp 0 0 localhost.49166 localhost.49166
> udp 0 0 *.* *.*

Is this on the server or an agent?

[Heyzoos]

Hi Michael,

Yes I chose a server install on the manager. # = the agent in this
case. metis = the manager.

Regards,
Dan

On Nov 1, 9:24 pm, Michael Starks <ossec-l...@michaelstarks.com>
wrote:

[Kirk Frankovich]

Greetings,

My apologies if this has already been asked/answered...I searched the
archive and could not find what I was looking for.

Is there a way to customize the email messages sent out my OSSEC? I
have a monitoring system that can alert me on emails and I would like to
send it specific information in both the subject and body so that I can
process it correctly.

Could someone please let me know if this is possible and if so, where
can I find the config?

Thank you very much!

Kirk Frankovich
Systems Administrator

847.427.5223 - Direct
847.489.4717 - Cell
kfran...@fortdearborn.com

Fort Dearborn Company
1530 Morse Ave
Elk Grove Village, IL 60007

--
Confidentiality Notice: This e-mail, including attachments, may include confidential and/or proprietary information, and may be used only by the person or entity to which it is addressed. If the reader of this e-mail is not the intended recipient or his or her authorized agent, the reader is hereby notified that any dissemination, distribution, copying or taking any action in reliance upon this information is prohibited. If you have received this e-mail in error, please notify the sender by replying to this message and delete this e-mail immediately.
This message was scanned by ESVA and is believed to be clean.

[Daniel Cid]

Hey,

It seems that for some reason the agentd queue is getting full (or
being shut down). Can you
check that ossec-agentd is running?

Plus, are you receiving anything from that agent on the manager? It
might be a good idea to
enable debug to see what is happening...

To run into debug mode, just stop ossec and do:

# /var/ossec/bin/ossec-agentd -d -d
# /var/ossec/bin/ossec-logcollector
# /var/ossec/bin/ossec-syscheckd

So we will see the debug of agentd.

Thanks,

--
Daniel B. Cid
dcid ( at ) ossec.net

[Daniel Cid]

Hi Kirk,

Currently it is not possible to modify that via a configuration file.
You would need to modify
the code to do that.

If you want do to that, just go to the ossec source code and look at
the ossec-hids/src/os_maild/maild.h
and ossec-hids/src/os_maild/sendmail.c files and play with the SUBJECT
and SMS_SUBJECT macros...

Thanks,

--
Daniel B. Cid
dcid ( at ) ossec.net

[Heyzoos]

Hi Dan,

Sorry for the late response. I had gone on to other things and somehow
missed that you had replied.

ossec-agentd is running when the error occurs. Not recieving anything
from the agent on the manager, other than aknowledgment that the agent
is connected.

OSSEC HIDS agent_control. List of available agents:

ID: 000, Name: saint (server), IP: 127.0.0.1, Active/Local
ID: 001, Name: db00, IP: 10.99.254.245, Active
ID: 002, Name: T002_2-10.99.254.55, IP: 10.99.254.55, Active
ID: 003, Name: T002-10.99.254.79, IP: 10.99.254.79, Active
ID: 005, Name: pcilona, IP: 10.99.254.236, Active

pcilona is the HP-UX box:

[root@saint rids]# agent_control -i 005

OSSEC HIDS agent_control. Agent information:
Agent ID: 005
Agent Name: pcilona
IP address: 10.99.254.236
Status: Active

Operating system: HP-UX pcilona B.11.23 U 9000/800
Client version: OSSEC HIDS v2.2
Last keep alive: Thu Nov 26 14:17:25 2009

Syscheck last started at: Unknown
Rootcheck last started at: Unknown


After I turned followed your instructions I did manage to query the
agents syscheck db. I don't know whether that was working before
though.

[root@saint rids]# syscheck_control -i 005

Integrity changes for agent 'pcilona (005) - 10.99.254.236':

Changes for 2009 Nov 26:
2009 Nov 26 13:50:03,0 - /var/ossec/etc/internal_options.conf
2009 Nov 26 14:04:54,0 - /var/ossec/etc/internal_options.conf


Here is the output you asked for:

# ../bin/ossec-control stop
ossec-logcollector not running ..
ossec-syscheckd not running ..
ossec-agentd not running ..
ossec-execd not running ..
OSSEC HIDS v2.2 Stopped
# ps -ef | grep ossec
# ls
ossec.log
# rm ossec.log
# ls
# /var/ossec/bin/ossec-agentd -d -d
2009/11/26 14:29:07 ossec-agentd: DEBUG: Starting ...
# /var/ossec/bin/ossec-logcollector
# /var/ossec/bin/ossec-syscheckd
# tail -f ossec.log
2009/11/26 14:29:11 ossec-syscheckd: INFO: Started (pid: 7201).
2009/11/26 14:29:11 ossec-rootcheck: INFO: Started (pid: 7201).
2009/11/26 14:29:11 ossec-syscheckd: INFO: Monitoring directory: '/
etc'.
2009/11/26 14:29:11 ossec-syscheckd: INFO: Monitoring directory: '/usr/
bin'.
2009/11/26 14:29:11 ossec-syscheckd: INFO: Monitoring directory: '/usr/
sbin'.
2009/11/26 14:29:11 ossec-syscheckd: INFO: Monitoring directory: '/
bin'.
2009/11/26 14:29:11 ossec-syscheckd: INFO: Monitoring directory: '/
sbin'.
2009/11/26 14:29:13 ossec-logcollector(1950): INFO: Analyzing file: '/
var/adm/syslog'.
2009/11/26 14:29:13 ossec-logcollector(1950): INFO: Analyzing file: '/
var/adm/syslog/syslog.log'.
2009/11/26 14:29:13 ossec-logcollector: INFO: Started (pid: 7198).
2009/11/26 14:29:43 ossec-syscheckd: INFO: Starting syscheck database
(pre-scan).
2009/11/26 14:33:48 ossec-syscheckd: INFO: Finished creating syscheck
database (pre-scan completed).
2009/11/26 14:35:48 ossec-syscheckd: INFO: Starting syscheck scan
(forwarding database).
2009/11/26 14:36:15 ossec-syscheckd: socket busy ..
2009/11/26 14:36:25 ossec-syscheckd: socket busy ..
2009/11/26 14:36:25 ossec-syscheckd(1224): ERROR: Error sending
message to queue.

2009/11/26 14:36:34 ossec-syscheckd: socket busy ..

2009/11/26 14:36:44 ossec-syscheckd: socket busy ..
2009/11/26 14:36:44 ossec-syscheckd: socketerr (not available).
2009/11/26 14:36:44 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/11/26 14:36:53 ossec-syscheckd: socket busy ..
2009/11/26 14:37:03 ossec-syscheckd: socket busy ..
2009/11/26 14:37:03 ossec-syscheckd: socketerr (not available).
2009/11/26 14:37:03 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/11/26 14:37:12 ossec-syscheckd: socket busy ..
2009/11/26 14:37:22 ossec-syscheckd: socket busy ..
2009/11/26 14:37:22 ossec-syscheckd: socketerr (not available).
2009/11/26 14:37:22 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/11/26 14:37:31 ossec-syscheckd: socket busy ..
2009/11/26 14:37:41 ossec-syscheckd: socket busy ..
2009/11/26 14:37:41 ossec-syscheckd: socketerr (not available).
2009/11/26 14:37:41 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/11/26 14:37:50 ossec-syscheckd: socket busy ..
2009/11/26 14:38:00 ossec-syscheckd: socket busy ..
2009/11/26 14:38:00 ossec-syscheckd: socketerr (not available).
2009/11/26 14:38:00 ossec-syscheckd(1224): ERROR: Error sending
message to queue.

2009/11/26 14:38:09 ossec-syscheckd: socket busy ..

2009/11/26 14:38:19 ossec-syscheckd: socket busy ..
2009/11/26 14:38:21 ossec-syscheckd: socketerr (not available).
2009/11/26 14:38:21 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/11/26 14:38:30 ossec-syscheckd: socket busy ..
2009/11/26 14:38:40 ossec-syscheckd: socket busy ..
2009/11/26 14:38:40 ossec-syscheckd: socketerr (not available).
2009/11/26 14:38:40 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/11/26 14:38:49 ossec-syscheckd: socket busy ..
2009/11/26 14:38:59 ossec-syscheckd: socket busy ..
2009/11/26 14:38:59 ossec-syscheckd: socketerr (not available).
2009/11/26 14:38:59 ossec-syscheckd(1224): ERROR: Error sending
message to queue.

2009/11/26 14:39:08 ossec-syscheckd: socket busy ..

2009/11/26 14:39:18 ossec-syscheckd: socket busy ..

2009/11/26 14:39:18 ossec-syscheckd: socketerr (not available).
2009/11/26 14:39:18 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/11/26 14:39:27 ossec-syscheckd: socket busy ..
2009/11/26 14:39:37 ossec-syscheckd: socket busy ..
2009/11/26 14:39:37 ossec-syscheckd: socketerr (not available).
2009/11/26 14:39:37 ossec-syscheckd(1224): ERROR: Error sending
message to queue.
2009/11/26 14:39:46 ossec-syscheckd: socket busy ..
2009/11/26 14:39:56 ossec-syscheckd: socket busy ..

2009/11/26 14:39:56 ossec-syscheckd: socketerr (not available).

On Nov 5, 4:09 pm, Daniel Cid <daniel....@gmail.com> wrote:
> Hey,
>
> It seems that for some reason the agentd queue is getting full (or
> being shut down). Can you
> check that ossec-agentd is running?
>
> Plus, are you receiving anything from that agent on the manager? It
> might be a good idea to
> enable debug to see what is happening...
>
> To run into debug mode, just stop ossec and do:
>
> # /var/ossec/bin/ossec-agentd -d -d
> # /var/ossec/bin/ossec-logcollector
> # /var/ossec/bin/ossec-syscheckd
>
> So we will see the debug of agentd.
>
> Thanks,
>
> --
> Daniel B. Cid
> dcid ( at ) ossec.net
>

[Matt]

Has this issue been worked around or resolved? I'm trying to get
ossec agents upgraded to 2.3 on HP-UX as well, and both PA-RISC and
ia64 architectures seem to be having this problem. They worked fine
with 1.6 -- would it be advisable to revert to the older build?

--Matt

[David Weise]

Hi,
It looks to be a kernel issue. If the linux kernel is 2.6.13 its
guaranteed to work. If its not, then a patch needs to be applied. The
older version was dnotify. The question is, what does ossec use on HP
UX to substitute inotify?

> ------------------------------------------------------------------------
>
>
> No virus found in this incoming message.
> Checked by AVG - www.avg.com
> Version: 8.5.432 / Virus Database: 270.14.129/2605 - Release Date: 01/07/10 07:35:00
>
>