Tripwire Agent Troubeshooting Steps

1.) Make Sure the Agent Interface listening to correct Ethernet interface
tw.rpc.interfaceAddr=172.16.36.22
java.rmi.server.hostname=172.16.36.22

2.) Make sure the required ports are opened

• Ports
  • TCP 443      Console access
    TCP 8080     App integration and agent updates ??
    TCP 9898     Port used when agent registering with tripwire servers. It will be request during agent installation : Server -> agent -> setup on agent
  • UDP 69          TFTP
    TCP 3306     MySQL
    TCP 1169     Real time monitoring port (Event Generator -> Tripwire Console)
• From Server to agent 9898
• From agent to server 9898 + 8080

DELETE agent log
agent/config

Connect to Database
     DB Server\Tripwire\TE\Server\sup\mysql\bin
     mysql -u root -p password
To Remove Red Flag
     UPDATE NODEG SET FAILS=0 WHERE NODEG.oid=(SELECT oid FROM Grpbl WHERE Grpbl.nme="s7exn01.buyabs.corp");
SELECT Grpbl.oid, nme, dsc from NODEG JOIN Grpbl ON Grpbl.oid=NODEG.oid WHERE FAILS=1