Bug 256481 - security/ossec-hids agent on PPC64 doesn't authenticate on amd64 server
Summary: security/ossec-hids agent on PPC64 doesn't authenticate on amd64 server
Status: Open
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: powerpc Any
: --- Affects Only Me
Assignee: freebsd-ports-bugs (Nobody)
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2021-06-08 14:32 UTC by Luciano Mannucci
Modified: 2023-04-27 21:42 UTC (History)
5 users (show)

See Also:
dominik.lisiak: maintainer-feedback+

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Luciano Mannucci 2021-06-08 14:32:06 UTC 
scenario:

an amd64 ossec-hids server running ossec-hids-server-3.6.0_1 under FreeBSD 12.2-RELEASE-p3 GENERIC  amd64 serves various agents from amd64 machines without problems.

a PPC64 freebsd machine running ossec-hids-agent-3.6.0_1 under FreeBSD 12.2-RELEASE-p3 r369227 GENERIC  powerpc is not recognised by the server.


On the server I get a lot of 

2021/06/08 16:30:22 ossec-remoted(1403): ERROR: Incorrectly formatted message from '212.45.144.123'.

if I start ossec-remoted with debug option enabled.
Comment 1 Dominik Lisiak 2021-06-27 17:28:26 UTC 
(In reply to Luciano Mannucci from comment #0)
Have you tried resetting counters?
On the agent run:
/usr/local/etc/rc.d/ossec-hids fetch_config
and follow the instructions if it fails.
Comment 2 Robert Clausecker freebsd_committer freebsd_triage 2023-04-27 21:42:47 UTC 
Sounds like the software has poor marshalling and doesn't convert endianess.  Please report this bug with upstream who is much more likely to be able to do something about this.  I've CC'ed pkubaj@ who is our resident ppc guy.