Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Failed Syscollector tests on Windows for 4.8.0 Beta 2 #5035

Closed
Deblintrake09 opened this issue Feb 27, 2024 · 1 comment
Closed

Failed Syscollector tests on Windows for 4.8.0 Beta 2 #5035

Deblintrake09 opened this issue Feb 27, 2024 · 1 comment

Comments

@Deblintrake09
Copy link
Contributor

Deblintrake09 commented Feb 27, 2024

Target version Related issue
4.8.0 - Beta 2 wazuh/wazuh#22125

Description

During release testing 4.8.0 Beta 2 IT suite execution, multiple syscollector tests failed on Windows endpoint.

These tests have not been migrated to github actions.

  • On the logs of all tests no syscollector event is detected.
  • Vulnerability detector configuration warnings detected that should not be present as VDT is configured on manager only.
2024/02/26 16:40:05 wazuh-agent[0] cryptography.c:543 at verify_hash_and_pe_signature(): DEBUG: PE signature verification succeeded for C:\Windows\System32\iphlpapi.dll
2024/02/26 16:40:05 wazuh-agent[0] dll_load_notify.c:101 at dll_notification(): DEBUG: The file 'C:\Windows\System32\iphlpapi.dll' is signed and its signature is valid.
2024/02/26 16:40:05 wazuh-agent[0] cryptography.c:543 at verify_hash_and_pe_signature(): DEBUG: PE signature verification succeeded for C:\Program Files (x86)\ossec-agent\libwinpthread-1.dll
2024/02/26 16:40:05 wazuh-agent[0] dll_load_notify.c:101 at dll_notification(): DEBUG: The file 'C:\Program Files (x86)\ossec-agent\libwinpthread-1.dll' is signed and its signature is valid.
2024/02/26 16:40:05 wazuh-agent[0] cryptography.c:543 at verify_hash_and_pe_signature(): DEBUG: PE signature verification succeeded for C:\Program Files (x86)\ossec-agent\libgcc_s_dw2-1.dll
2024/02/26 16:40:05 wazuh-agent[0] dll_load_notify.c:101 at dll_notification(): DEBUG: The file 'C:\Program Files (x86)\ossec-agent\libgcc_s_dw2-1.dll' is signed and its signature is valid.
2024/02/26 16:40:05 wazuh-agent[0] cryptography.c:543 at verify_hash_and_pe_signature(): DEBUG: PE signature verification succeeded for C:\Program Files (x86)\ossec-agent\libstdc++-6.dll
2024/02/26 16:40:05 wazuh-agent[0] dll_load_notify.c:101 at dll_notification(): DEBUG: The file 'C:\Program Files (x86)\ossec-agent\libstdc++-6.dll' is signed and its signature is valid.
2024/02/26 16:40:05 wazuh-agent[0] cryptography.c:543 at verify_hash_and_pe_signature(): DEBUG: PE signature verification succeeded for C:\Program Files (x86)\ossec-agent\sysinfo.dll
2024/02/26 16:40:05 wazuh-agent[0] dll_load_notify.c:101 at dll_notification(): DEBUG: The file 'C:\Program Files (x86)\ossec-agent\sysinfo.dll' is signed and its signature is valid.
2024/02/26 16:40:05 wazuh-agent[2124] win_utils.c:105 at local_start(): DEBUG: Reading agent configuration.
2024/02/26 16:40:05 wazuh-agent[2124] cryptography.c:543 at verify_hash_and_pe_signature(): DEBUG: PE signature verification succeeded for C:\Program Files (x86)\ossec-agent\libwazuhext.dll
2024/02/26 16:40:05 wazuh-agent[2124] dll_load_notify.c:101 at dll_notification(): DEBUG: The file 'C:\Program Files (x86)\ossec-agent\libwazuhext.dll' is signed and its signature is valid.
2024/02/26 16:40:05 wazuh-agent[2124] config.c:193 at read_main_elements(): WARNING: vulnerability-detection configuration is only set in the manager.
2024/02/26 16:40:05 wazuh-agent[2124] config.c:212 at read_main_elements(): WARNING: indexer configuration is only set in the manager.
2024/02/26 16:40:05 wazuh-agent[2124] config.c:193 at read_main_elements(): WARNING: vulnerability-detection configuration is only set in the manager.
2024/02/26 16:40:05 wazuh-agent[2124] config.c:212 at read_main_elements(): WARNING: indexer configuration is only set in the manager.
2024/02/26 16:40:05 wazuh-agent[2124] agent_op.c:218 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile().
2024/02/26 16:40:05 wazuh-agent[2124] agent_op.c:237 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [-]
2024/02/26 16:40:05 wazuh-agent[2124] config.c:450 at ReadConfig(): DEBUG: agent_config element does not have any attributes.
2024/02/26 16:40:05 wazuh-agent[2124] agent_op.c:218 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile().
2024/02/26 16:40:05 wazuh-agent[2124] agent_op.c:237 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [-]
2024/02/26 16:40:05 wazuh-agent[2124] config.c:450 at ReadConfig(): DEBUG: agent_config element does not have any attributes.
2024/02/26 16:40:05 wazuh-agent[2124] win_utils.c:130 at local_start(): INFO: Using notify time: 10 and max time to reconnect: 1215752191
2024/02/26 16:40:05 wazuh-agent[2124] win_utils.c:137 at local_start(): DEBUG: Reading logcollector configuration.
2024/02/26 16:40:05 wazuh-agent[2124] config.c:82 at LogCollectorConfig(): DEBUG: The maximum number of files to monitor cannot exceed 200 in Windows, so it will be limited.
2024/02/26 16:40:05 wazuh-agent[2124] config.c:193 at read_main_elements(): WARNING: vulnerability-detection configuration is only set in the manager.
2024/02/26 16:40:05 wazuh-agent[2124] config.c:212 at read_main_elements(): WARNING: indexer configuration is only set in the manager.
2024/02/26 16:40:05 wazuh-agent[2124] agent_op.c:218 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile().

More research is needed.

@sebasfalcone
Copy link
Member

Given that the tests performed over 4.8.0 beta 2 were compromised by misalignment in the generated content, we are expecting the test results for beta 3 to see if this problem is indeed present

@davidjiglesias davidjiglesias closed this as not planned Won't fix, can't repro, duplicate, stale Mar 17, 2024
@wazuhci wazuhci moved this from Backlog to Done in Release 4.8.0 Mar 17, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
No open projects
Status: Done
Development

No branches or pull requests

4 participants