Link to home
Start Free TrialLog in
Avatar of ammadeyy2020
ammadeyy2020

asked on

how to open port in linux, ossec client cannot connect

anyone aware of ossec log monitoring software?

i have installed ossec to ubuntu 9 server edition
ubuntu is with default installation, only ossec i installed

ossec is using port 1514 to communicate with clients, from a client pc i telnet to 1514, cannot connect

in server i check
root@ossec:/var/ossec/etc# netstat -an | grep LISTEN
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN
tcp        0      0 0.0.0.0:445             0.0.0.0:*               LISTEN
tcp        0      0 0.0.0.0:139             0.0.0.0:*               LISTEN
tcp6       0      0 :::22                   :::*                    LISTEN
unix  2      [ ACC ]     STREAM     LISTENING     4527     /tmp/.winbindd/pipe
unix  2      [ ACC ]     STREAM     LISTENING     2747     @/com/ubuntu/upstart
unix  2      [ ACC ]     STREAM     LISTENING     4529     /var/run/samba/winbindd_privileged/pipe
unix  2      [ ACC ]     STREAM     LISTENING     4365     /tmp/.lwidentity/pipe
unix  2      [ ACC ]     STREAM     LISTENING     4367     /var/lib/likewise-open/lwidentity_privile
ged/pipe
root@ossec:/var/ossec/etc#

wats the command to open port 1514?
SOLUTION
Avatar of ajay_mhasal
ajay_mhasal
Flag of India image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of ammadeyy2020
ammadeyy2020

ASKER

attached screenshort, service is already running
1.png
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
hi
iptables -L shows udp port 1514 is open

since the question i asked is about how to open port in linux i will close this question and open new question regarding ossec issue
You don't "open" a port in Linux. It is OSSEC that listens for connections on a particular port. Try disabling iptables to rule out the port being blocked /etc/init.d/iptables stop.

Did you run netstat -atup ?

Don't filter just for "LISTEN" as you may have a connection that is in the "ESTABLISHED" state.