Dragon 7.5.0.95 HIDS client cannot connect to EMS server
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
‎11-01-2013 06:48 PM
I have a 7.5.0.95 Dragon EMS server and sensors. One sensor (HIDS running on Linux) shows the Event Channel down in the reporting dashboard, and the management client shows it unable to communicate. The HIDS sensor keeps logging "[net-cfg-client (25650)]: Could not connect: Connection timed out." What should I look at to fix this issue? I've got other sensors working just fine, this is my odd box.
17 REPLIES 17
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
‎11-04-2013 01:20 PM
Hi David, Thanks for mailing in. Its sounds like there is some difficulty making a connection between the two systems on both the configuration and event channels. Could you confirm by running this on the Host sensor? #netstat -antuv | grep 911 We would be looking for Established back to the server for 9111 and 9112 if all was ok.
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
‎11-01-2013 08:18 PM
Thanks for the response. I haven't logged a ticket yet. I keep thinking the solution is just around the corner and it's just a config error.
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
‎11-01-2013 07:15 PM
Hi David. Thank you for posting your question to the community. I will get one of our GTAC folks involved and see if we can resolve your issue. Have you logged a trouble ticket for this situation?
