Bug 256481

Summary: security/ossec-hids agent on PPC64 doesn't authenticate on amd64 server
Product: Ports & Packages Reporter: Luciano Mannucci <luciano>
Component: Individual Port(s)Assignee: freebsd-ports-bugs (Nobody) <ports-bugs>
Status: New ---    
Severity: Affects Only Me CC: dominik.lisiak, luciano, powerpc
Priority: --- Flags: dominik.lisiak: maintainer-feedback+
Version: Latest   
Hardware: powerpc   
OS: Any   

Description Luciano Mannucci 2021-06-08 14:32:06 UTC
scenario:

an amd64 ossec-hids server running ossec-hids-server-3.6.0_1 under FreeBSD 12.2-RELEASE-p3 GENERIC  amd64 serves various agents from amd64 machines without problems.

a PPC64 freebsd machine running ossec-hids-agent-3.6.0_1 under FreeBSD 12.2-RELEASE-p3 r369227 GENERIC  powerpc is not recognised by the server.


On the server I get a lot of 

2021/06/08 16:30:22 ossec-remoted(1403): ERROR: Incorrectly formatted message from '212.45.144.123'.

if I start ossec-remoted with debug option enabled.
Comment 1 Dominik Lisiak 2021-06-27 17:28:26 UTC
(In reply to Luciano Mannucci from comment #0)
Have you tried resetting counters?
On the agent run:
/usr/local/etc/rc.d/ossec-hids fetch_config
and follow the instructions if it fails.