Skip site navigation (1)Skip section navigation (2) 
Date:      Thu, 30 Jan 2020 10:25:15 +0000
From:      bugzilla-noreply@freebsd.org
To:        ports-bugs@FreeBSD.org
Subject:   [Bug 243723] security/ossec-hids-agent: ossec-agentd: ERROR: msgbuf_write() error: Broken pipe (0x1)
Message-ID:  <bug-243723-7788@https.bugs.freebsd.org/bugzilla/>
next in thread | raw e-mail | index | archive | help 
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D243723

            Bug ID: 243723
           Summary: security/ossec-hids-agent: ossec-agentd: ERROR:
                    msgbuf_write() error: Broken pipe (0x1)
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: Individual Port(s)
          Assignee: ports-bugs@FreeBSD.org
          Reporter: egypcio@FreeBSD.org

ossec v3.5.0 does not work as expected under FreeBSD. rolling back it to
previous version (v3.3.0) fixes the problem.

# uname -UKrips
FreeBSD 12.1-STABLE amd64 GENERIC 1201510 1201510

# pkg info -x oss
ossec-hids-agent-3.5.0
ossec-hids-agent-config-3.5.0

# /usr/local/ossec-hids/bin/ossec-agentd -d -f
 ...
2020/01/30 11:14:04 ossec-agentd [dns]: ERROR: socket error
2020/01/30 11:14:04 ossec-agentd: INFO: Trying to connect to server 10.0.5.=
16,
port 1514.
2020/01/30 11:14:04 ossec-agentd: ERROR: msgbuf_write() error: Broken pipe
(0x1)
2020/01/30 11:14:04 ossec-agentd: WARN: n =3D=3D 0
2020/01/30 11:14:04 ossec-agentd: WARN2: n =3D=3D 0
2020/01/30 11:14:04 ossec-agentd: ERROR Wrong imsg type.
2020/01/30 11:14:04 ossec-agentd [dns]: ERROR: socket error
2020/01/30 11:14:04 ossec-agentd: INFO: Trying to connect to server 10.0.5.=
16,
port 1514.
2020/01/30 11:14:04 ossec-agentd: ERROR: msgbuf_write() error: Broken pipe
(0x1)
^C2020/01/30 11:14:04 ossec-agentd(1225): INFO: SIGNAL [(2)-(Interrupt)]
Received. Exit Cleaning...

it's definitely *NOT* an issue with DNS config or packet filtering, once ju=
st
reverting OSSEC to its previous version fixes the problem.

--=20
You are receiving this mail because:
You are the assignee for the bug.=

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-243723-7788>