search

ossec / ossec-hids

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.
http://www.ossec.net
Other
4.42k stars 1.03k forks source link

Port 1514 doesnot opened #1405

Closed girish624 closed 5 years ago

girish624 commented 6 years ago

I have downloaded tar ball version 2.9.3 from following site https://github.com/ossec/ossec-hids/releases . I wanted to install a ossec manager.

1) untar ed the pakage 2) executed ./install.sh and selected server option

I am not able to see port number 1514 opened. even after I execute the command below I could not see port opened /var/ossec/bin/ossec-control start I have used "netstat -tulpn | grep 1514" to see the port opened.

I tried with OS centos 6 & 7. I tried with ossec 2.8.3 also. but helpless

ddpbsd commented 6 years ago

Is ossec-remoted running?

girish624 commented 6 years ago

I have executed manage_agents command and added the clients. I can see now port 1514 opened. and remoted service is running. In fact, i was following https://ossec.github.io/docs/manual/installation/install-source.html . in step third says manager listens to 1514, just after step 2. which give rise confusion. it make more appropriate if the manage_agents is added to install.sh it self. Would you please let me know step by step configuration for manager, agent integration before you close this ticket.

ddpbsd commented 6 years ago

I'll add a note to the documentation that an agent may have to be added before remoted will run. I'm not sure what "step by step configuration" you're looking for. More details would be necessary for me to help.