PS1-2043-macos-agent.html

-----------------------------Captured stdout setup------------------------------
Killing wazuh-modulesd... Killing wazuh-logcollector... Killing wazuh-syscheckd... Killing wazuh-agentd... Killing wazuh-execd... Wazuh v4.3.0 Stopped Starting Wazuh v4.3.0... Started wazuh-execd... Started wazuh-agentd... Started wazuh-syscheckd... Started wazuh-logcollector... Started wazuh-modulesd... Completed.
-----------------------------Captured stderr setup------------------------------
2021/10/15 08:12:53 wazuh-logcollector[963] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2021/10/15 08:12:53 wazuh-logcollector[963] main.c:126 at main(): DEBUG: Wazuh home directory: /Library/Ossec 2021/10/15 08:12:53 wazuh-logcollector[963] agent_op.c:215 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2021/10/15 08:12:53 wazuh-logcollector[963] agent_op.c:234 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [-] 2021/10/15 08:12:53 wazuh-logcollector[963] config.c:390 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2021/10/15 08:12:57 rootcheck: INFO: Rootcheck disabled. 2021/10/15 08:12:58 wazuh-logcollector[1081] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2021/10/15 08:12:58 wazuh-logcollector[1081] main.c:126 at main(): DEBUG: Wazuh home directory: /Library/Ossec 2021/10/15 08:12:58 wazuh-logcollector[1081] agent_op.c:215 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2021/10/15 08:12:58 wazuh-logcollector[1081] agent_op.c:234 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [-] 2021/10/15 08:12:58 wazuh-logcollector[1081] config.c:390 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2021/10/15 08:12:58 wazuh-logcollector[1081] main.c:152 at main(): INFO: (1905): No file configured to monitor. 2021/10/15 08:13:03 wazuh-logcollector[1109] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2021/10/15 08:13:03 wazuh-logcollector[1109] main.c:126 at main(): DEBUG: Wazuh home directory: /Library/Ossec 2021/10/15 08:13:03 wazuh-logcollector[1109] agent_op.c:215 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2021/10/15 08:13:03 wazuh-logcollector[1109] agent_op.c:234 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [-] 2021/10/15 08:13:03 wazuh-logcollector[1109] config.c:390 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2021/10/15 08:13:03 wazuh-logcollector[1109] main.c:152 at main(): INFO: (1905): No file configured to monitor. 2021-10-15 08:13:03,057 - wazuh_testing - DEBUG - Set local_internal_option to {'logcollector.debug': 2, 'logcollector.vcheck_files': 4, 'logcollector.sample_log_length': 100} 2021-10-15 08:13:03,061 - wazuh_testing - DEBUG - Ignore error set to False 2021-10-15 08:13:03,061 - wazuh_testing - DEBUG - Restarting wazuh-logcollector 2021/10/15 08:13:03 wazuh-logcollector[1120] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2021/10/15 08:13:03 wazuh-logcollector[1120] main.c:126 at main(): DEBUG: Wazuh home directory: /Library/Ossec 2021/10/15 08:13:03 wazuh-logcollector[1120] agent_op.c:215 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2021/10/15 08:13:03 wazuh-logcollector[1120] agent_op.c:234 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [-] 2021/10/15 08:13:03 wazuh-logcollector[1120] config.c:390 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2021-10-15 08:13:03,111 - wazuh_testing - DEBUG - Initializing file to monitor to /Library/Ossec/logs/ossec.log
-------------------------------Captured log setup-------------------------------
DEBUG wazuh_testing:conftest.py:719 Set local_internal_option to {'logcollector.debug': 2, 'logcollector.vcheck_files': 4, 'logcollector.sample_log_length': 100} DEBUG wazuh_testing:conftest.py:640 Ignore error set to False DEBUG wazuh_testing:conftest.py:654 Restarting wazuh-logcollector DEBUG wazuh_testing:conftest.py:692 Initializing file to monitor to /Library/Ossec/logs/ossec.log
----------------------------Captured stderr teardown----------------------------
2021-10-15 08:13:15,865 - wazuh_testing - DEBUG - Trucanted /Library/Ossec/logs/ossec.log
-----------------------------Captured log teardown------------------------------
DEBUG wazuh_testing:conftest.py:700 Trucanted /Library/Ossec/logs/ossec.log

-----------------------------Captured stdout setup------------------------------
Fri Oct 15 15:13:15 UTC 2021
-----------------------------Captured stderr setup------------------------------
2021-10-15 08:13:15,889 - wazuh_testing - DEBUG - Stopping wazuh-logcollector 2021-10-15 08:13:15,012 - wazuh_testing - DEBUG - Ignore error set to False 2021-10-15 08:13:15,013 - wazuh_testing - DEBUG - Restarting wazuh-logcollector 2021/10/15 08:13:15 wazuh-logcollector[1145] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2021/10/15 08:13:15 wazuh-logcollector[1145] main.c:126 at main(): DEBUG: Wazuh home directory: /Library/Ossec 2021/10/15 08:13:15 wazuh-logcollector[1145] agent_op.c:215 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2021/10/15 08:13:15 wazuh-logcollector[1145] agent_op.c:234 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [-] 2021/10/15 08:13:15 wazuh-logcollector[1145] config.c:390 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2021-10-15 08:13:15,054 - wazuh_testing - DEBUG - Initializing file to monitor to /Library/Ossec/logs/ossec.log
-------------------------------Captured log setup-------------------------------
DEBUG wazuh_testing:conftest.py:674 Stopping wazuh-logcollector DEBUG wazuh_testing:conftest.py:640 Ignore error set to False DEBUG wazuh_testing:conftest.py:654 Restarting wazuh-logcollector DEBUG wazuh_testing:conftest.py:692 Initializing file to monitor to /Library/Ossec/logs/ossec.log
----------------------------Captured stdout teardown----------------------------
Fri Oct 15 15:13:28 UTC 2021
----------------------------Captured stderr teardown----------------------------
2021-10-15 08:13:28,654 - wazuh_testing - DEBUG - Trucanted /Library/Ossec/logs/ossec.log 2021-10-15 08:13:28,654 - wazuh_testing - DEBUG - Stopping wazuh-logcollector 2021-10-15 08:13:28,010 - wazuh_testing - DEBUG - Restore local_internal_option to {'logcollector.debug': '2\n', 'logcollector.sample_log_length': '100\n', 'monitord.rotate_log': '0\n', 'agent.debug': '0\n'}
-----------------------------Captured log teardown------------------------------
DEBUG wazuh_testing:conftest.py:700 Trucanted /Library/Ossec/logs/ossec.log DEBUG wazuh_testing:conftest.py:674 Stopping wazuh-logcollector DEBUG wazuh_testing:conftest.py:724 Restore local_internal_option to {'logcollector.debug': '2\n', 'logcollector.sample_log_length': '100\n', 'monitord.rotate_log': '0\n', 'agent.debug': '0\n'}

-----------------------------Captured stderr setup------------------------------
2021-10-15 08:13:28,039 - wazuh_testing - DEBUG - Set local_internal_option to {'logcollector.vcheck_files': 4} 2021-10-15 08:13:28,043 - wazuh_testing - DEBUG - Ignore error set to False 2021-10-15 08:13:28,043 - wazuh_testing - DEBUG - Restarting wazuh-logcollector 2021-10-15 08:13:28,072 - wazuh_testing - DEBUG - Initializing file to monitor to /Library/Ossec/logs/ossec.log
-------------------------------Captured log setup-------------------------------
DEBUG wazuh_testing:conftest.py:719 Set local_internal_option to {'logcollector.vcheck_files': 4} DEBUG wazuh_testing:conftest.py:640 Ignore error set to False DEBUG wazuh_testing:conftest.py:654 Restarting wazuh-logcollector DEBUG wazuh_testing:conftest.py:692 Initializing file to monitor to /Library/Ossec/logs/ossec.log
----------------------------Captured stderr teardown----------------------------
2021-10-15 08:13:31,137 - wazuh_testing - DEBUG - Trucanted /Library/Ossec/logs/ossec.log
-----------------------------Captured log teardown------------------------------
DEBUG wazuh_testing:conftest.py:700 Trucanted /Library/Ossec/logs/ossec.log

-----------------------------Captured stdout setup------------------------------
Fri Oct 15 15:13:31 UTC 2021
-----------------------------Captured stderr setup------------------------------
2021-10-15 08:13:31,159 - wazuh_testing - DEBUG - Stopping wazuh-logcollector 2021-10-15 08:13:31,015 - wazuh_testing - DEBUG - Ignore error set to False 2021-10-15 08:13:31,015 - wazuh_testing - DEBUG - Restarting wazuh-logcollector 2021-10-15 08:13:31,051 - wazuh_testing - DEBUG - Initializing file to monitor to /Library/Ossec/logs/ossec.log
-------------------------------Captured log setup-------------------------------
DEBUG wazuh_testing:conftest.py:674 Stopping wazuh-logcollector DEBUG wazuh_testing:conftest.py:640 Ignore error set to False DEBUG wazuh_testing:conftest.py:654 Restarting wazuh-logcollector DEBUG wazuh_testing:conftest.py:692 Initializing file to monitor to /Library/Ossec/logs/ossec.log
----------------------------Captured stdout teardown----------------------------
Fri Oct 15 15:13:34 UTC 2021
----------------------------Captured stderr teardown----------------------------
2021-10-15 08:13:34,115 - wazuh_testing - DEBUG - Trucanted /Library/Ossec/logs/ossec.log 2021-10-15 08:13:34,116 - wazuh_testing - DEBUG - Stopping wazuh-logcollector 2021-10-15 08:13:34,012 - wazuh_testing - DEBUG - Restore local_internal_option to {'logcollector.debug': '2\n', 'logcollector.sample_log_length': '100\n', 'monitord.rotate_log': '0\n', 'agent.debug': '0\n'}
-----------------------------Captured log teardown------------------------------
DEBUG wazuh_testing:conftest.py:700 Trucanted /Library/Ossec/logs/ossec.log DEBUG wazuh_testing:conftest.py:674 Stopping wazuh-logcollector DEBUG wazuh_testing:conftest.py:724 Restore local_internal_option to {'logcollector.debug': '2\n', 'logcollector.sample_log_length': '100\n', 'monitord.rotate_log': '0\n', 'agent.debug': '0\n'}

-----------------------------Captured stderr setup------------------------------
2021-10-15 08:13:34,049 - wazuh_testing - DEBUG - Set local_internal_option to {'logcollector.vcheck_files': 4} 2021-10-15 08:13:34,053 - wazuh_testing - DEBUG - Ignore error set to False 2021-10-15 08:13:34,053 - wazuh_testing - DEBUG - Restarting wazuh-logcollector 2021-10-15 08:13:34,090 - wazuh_testing - DEBUG - Initializing file to monitor to /Library/Ossec/logs/ossec.log
-------------------------------Captured log setup-------------------------------
DEBUG wazuh_testing:conftest.py:719 Set local_internal_option to {'logcollector.vcheck_files': 4} DEBUG wazuh_testing:conftest.py:640 Ignore error set to False DEBUG wazuh_testing:conftest.py:654 Restarting wazuh-logcollector DEBUG wazuh_testing:conftest.py:692 Initializing file to monitor to /Library/Ossec/logs/ossec.log
----------------------------Captured stdout teardown----------------------------
Fri Oct 15 15:13:47 UTC 2021
----------------------------Captured stderr teardown----------------------------
2021-10-15 08:13:47,129 - wazuh_testing - DEBUG - Trucanted /Library/Ossec/logs/ossec.log 2021-10-15 08:13:47,129 - wazuh_testing - DEBUG - Stopping wazuh-logcollector 2021-10-15 08:13:47,012 - wazuh_testing - DEBUG - Restore local_internal_option to {'logcollector.debug': '2\n', 'logcollector.sample_log_length': '100\n', 'monitord.rotate_log': '0\n', 'agent.debug': '0\n'}
-----------------------------Captured log teardown------------------------------
DEBUG wazuh_testing:conftest.py:700 Trucanted /Library/Ossec/logs/ossec.log DEBUG wazuh_testing:conftest.py:674 Stopping wazuh-logcollector DEBUG wazuh_testing:conftest.py:724 Restore local_internal_option to {'logcollector.debug': '2\n', 'logcollector.sample_log_length': '100\n', 'monitord.rotate_log': '0\n', 'agent.debug': '0\n'}

-----------------------------Captured stderr setup------------------------------
2021-10-15 08:13:47,048 - wazuh_testing - DEBUG - Set local_internal_option to {'logcollector.debug': 2, 'logcollector.sample_log_length': 200} 2021-10-15 08:13:47,049 - wazuh_testing - DEBUG - Restarting wazuh-logcollector 2021/10/15 08:13:47 wazuh-logcollector[1227] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2021/10/15 08:13:47 wazuh-logcollector[1227] main.c:126 at main(): DEBUG: Wazuh home directory: /Library/Ossec 2021/10/15 08:13:47 wazuh-logcollector[1227] agent_op.c:215 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2021/10/15 08:13:47 wazuh-logcollector[1227] agent_op.c:234 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [-] 2021/10/15 08:13:47 wazuh-logcollector[1227] config.c:390 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2021-10-15 08:13:47,086 - wazuh_testing - DEBUG - Initializing file to monitor to /Library/Ossec/logs/ossec.log 2021/10/15 08:13:47 wazuh-logcollector[1231] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2021/10/15 08:13:47 wazuh-logcollector[1231] main.c:126 at main(): DEBUG: Wazuh home directory: /Library/Ossec 2021/10/15 08:13:47 wazuh-logcollector[1231] agent_op.c:215 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2021/10/15 08:13:47 wazuh-logcollector[1231] agent_op.c:234 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [-] 2021/10/15 08:13:47 wazuh-logcollector[1231] config.c:390 at ReadConfig(): DEBUG: agent_config element does not have any attributes.
-------------------------------Captured log setup-------------------------------
DEBUG wazuh_testing:conftest.py:719 Set local_internal_option to {'logcollector.debug': 2, 'logcollector.sample_log_length': 200} DEBUG wazuh_testing:conftest.py:654 Restarting wazuh-logcollector DEBUG wazuh_testing:conftest.py:692 Initializing file to monitor to /Library/Ossec/logs/ossec.log
----------------------------Captured stderr teardown----------------------------
2021-10-15 08:13:51,693 - wazuh_testing - DEBUG - Trucanted /Library/Ossec/logs/ossec.log
-----------------------------Captured log teardown------------------------------
DEBUG wazuh_testing:conftest.py:700 Trucanted /Library/Ossec/logs/ossec.log

-----------------------------Captured stderr setup------------------------------
2021-10-15 08:13:51,725 - wazuh_testing - DEBUG - Initializing file to monitor to /Library/Ossec/logs/ossec.log 2021/10/15 08:13:51 wazuh-logcollector[1253] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2021/10/15 08:13:51 wazuh-logcollector[1253] main.c:126 at main(): DEBUG: Wazuh home directory: /Library/Ossec 2021/10/15 08:13:51 wazuh-logcollector[1253] agent_op.c:215 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2021/10/15 08:13:51 wazuh-logcollector[1253] agent_op.c:234 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [-] 2021/10/15 08:13:51 wazuh-logcollector[1253] config.c:390 at ReadConfig(): DEBUG: agent_config element does not have any attributes.
-------------------------------Captured log setup-------------------------------
DEBUG wazuh_testing:conftest.py:692 Initializing file to monitor to /Library/Ossec/logs/ossec.log
----------------------------Captured stdout teardown----------------------------
Fri Oct 15 15:13:56 UTC 2021
----------------------------Captured stderr teardown----------------------------
2021-10-15 08:13:56,844 - wazuh_testing - DEBUG - Trucanted /Library/Ossec/logs/ossec.log 2021-10-15 08:13:56,844 - wazuh_testing - DEBUG - Stopping wazuh-logcollector 2021-10-15 08:13:56,868 - wazuh_testing - DEBUG - Restore local_internal_option to {'logcollector.debug': '2\n', 'logcollector.sample_log_length': '100\n', 'monitord.rotate_log': '0\n', 'agent.debug': '0\n'}
-----------------------------Captured log teardown------------------------------
DEBUG wazuh_testing:conftest.py:700 Trucanted /Library/Ossec/logs/ossec.log DEBUG wazuh_testing:conftest.py:674 Stopping wazuh-logcollector DEBUG wazuh_testing:conftest.py:724 Restore local_internal_option to {'logcollector.debug': '2\n', 'logcollector.sample_log_length': '100\n', 'monitord.rotate_log': '0\n', 'agent.debug': '0\n'}

-----------------------------Captured stderr setup------------------------------
2021-10-15 08:13:56,058 - wazuh_testing - DEBUG - Set local_internal_option to {'logcollector.debug': 2, 'logcollector.sample_log_length': 100} 2021-10-15 08:13:56,059 - wazuh_testing - DEBUG - Restarting wazuh-logcollector 2021/10/15 08:13:56 wazuh-logcollector[1269] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2021/10/15 08:13:56 wazuh-logcollector[1269] main.c:126 at main(): DEBUG: Wazuh home directory: /Library/Ossec 2021/10/15 08:13:56 wazuh-logcollector[1269] agent_op.c:215 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2021/10/15 08:13:56 wazuh-logcollector[1269] agent_op.c:234 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [-] 2021/10/15 08:13:56 wazuh-logcollector[1269] config.c:390 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2021-10-15 08:13:56,111 - wazuh_testing - DEBUG - Initializing file to monitor to /Library/Ossec/logs/ossec.log
-------------------------------Captured log setup-------------------------------
DEBUG wazuh_testing:conftest.py:719 Set local_internal_option to {'logcollector.debug': 2, 'logcollector.sample_log_length': 100} DEBUG wazuh_testing:conftest.py:654 Restarting wazuh-logcollector DEBUG wazuh_testing:conftest.py:692 Initializing file to monitor to /Library/Ossec/logs/ossec.log
------------------------------Captured stdout call------------------------------
Killing wazuh-modulesd... Killing wazuh-logcollector... Killing wazuh-syscheckd... Killing wazuh-agentd... Killing wazuh-execd... Wazuh v4.3.0 Stopped Starting Wazuh v4.3.0... Started wazuh-execd... Started wazuh-agentd... Started wazuh-syscheckd... Started wazuh-logcollector... Started wazuh-modulesd... Completed.
------------------------------Captured stderr call------------------------------
2021/10/15 08:14:01 wazuh-agentd: ERROR: (1103): Could not open file 'queue/sockets/.agent_info' due to [(2)-(No such file or directory)]. 2021/10/15 08:14:01 wazuh-syscheckd: ERROR: (1103): Could not open file 'queue/sockets/.agent_info' due to [(2)-(No such file or directory)]. 2021/10/15 08:14:01 wazuh-syscheckd: ERROR: (1103): Could not open file 'queue/sockets/.agent_info' due to [(2)-(No such file or directory)]. 2021/10/15 08:14:01 wazuh-logcollector[1359] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2021/10/15 08:14:01 wazuh-logcollector[1359] main.c:126 at main(): DEBUG: Wazuh home directory: /Library/Ossec 2021/10/15 08:14:01 wazuh-logcollector[1359] agent_op.c:215 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2021/10/15 08:14:01 wazuh-logcollector[1359] agent_op.c:219 at os_read_agent_profile(): ERROR: (1103): Could not open file 'queue/sockets/.agent_info' due to [(2)-(No such file or directory)]. 2021/10/15 08:14:01 wazuh-logcollector[1359] config.c:390 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2021/10/15 08:14:01 wazuh-logcollector[1359] config.c:399 at ReadConfig(): DEBUG: but agent has a profile name. 2021/10/15 08:14:01 wazuh-modulesd: ERROR: (1103): Could not open file 'queue/sockets/.agent_info' due to [(2)-(No such file or directory)]. 2021/10/15 08:14:02 wazuh-agentd: ERROR: (1103): Could not open file 'queue/sockets/.agent_info' due to [(2)-(No such file or directory)]. 2021/10/15 08:14:03 rootcheck: INFO: Rootcheck disabled. 2021/10/15 08:14:04 wazuh-logcollector[1413] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2021/10/15 08:14:04 wazuh-logcollector[1413] main.c:126 at main(): DEBUG: Wazuh home directory: /Library/Ossec 2021/10/15 08:14:04 wazuh-logcollector[1413] agent_op.c:215 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2021/10/15 08:14:04 wazuh-logcollector[1413] agent_op.c:234 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [-] 2021/10/15 08:14:04 wazuh-logcollector[1413] config.c:390 at ReadConfig(): DEBUG: agent_config element does not have any attributes.
----------------------------Captured stderr teardown----------------------------
2021-10-15 08:14:50,724 - wazuh_testing - DEBUG - Trucanted /Library/Ossec/logs/ossec.log
-----------------------------Captured log teardown------------------------------
DEBUG wazuh_testing:conftest.py:700 Trucanted /Library/Ossec/logs/ossec.log

-----------------------------Captured stdout setup------------------------------
Fri Oct 15 15:14:50 UTC 2021
-----------------------------Captured stderr setup------------------------------
2021-10-15 08:14:50,748 - wazuh_testing - DEBUG - Stopping wazuh-logcollector 2021-10-15 08:14:50,013 - wazuh_testing - DEBUG - Restarting wazuh-logcollector 2021/10/15 08:14:50 wazuh-logcollector[1488] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2021/10/15 08:14:50 wazuh-logcollector[1488] main.c:126 at main(): DEBUG: Wazuh home directory: /Library/Ossec 2021/10/15 08:14:50 wazuh-logcollector[1488] agent_op.c:215 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2021/10/15 08:14:50 wazuh-logcollector[1488] agent_op.c:234 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [-] 2021/10/15 08:14:50 wazuh-logcollector[1488] config.c:390 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2021-10-15 08:14:50,050 - wazuh_testing - DEBUG - Initializing file to monitor to /Library/Ossec/logs/ossec.log
-------------------------------Captured log setup-------------------------------
DEBUG wazuh_testing:conftest.py:674 Stopping wazuh-logcollector DEBUG wazuh_testing:conftest.py:654 Restarting wazuh-logcollector DEBUG wazuh_testing:conftest.py:692 Initializing file to monitor to /Library/Ossec/logs/ossec.log
------------------------------Captured stdout call------------------------------
Killing wazuh-modulesd... Killing wazuh-logcollector... Killing wazuh-syscheckd... Killing wazuh-agentd... Killing wazuh-execd... Wazuh v4.3.0 Stopped Starting Wazuh v4.3.0... Started wazuh-execd... Started wazuh-agentd... Started wazuh-syscheckd... Started wazuh-logcollector... Started wazuh-modulesd... Completed.
------------------------------Captured stderr call------------------------------
2021/10/15 08:14:56 wazuh-agentd: ERROR: (1103): Could not open file 'queue/sockets/.agent_info' due to [(2)-(No such file or directory)]. 2021/10/15 08:14:56 wazuh-syscheckd: ERROR: (1103): Could not open file 'queue/sockets/.agent_info' due to [(2)-(No such file or directory)]. 2021/10/15 08:14:56 wazuh-syscheckd: ERROR: (1103): Could not open file 'queue/sockets/.agent_info' due to [(2)-(No such file or directory)]. 2021/10/15 08:14:56 wazuh-logcollector[1580] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2021/10/15 08:14:56 wazuh-logcollector[1580] main.c:126 at main(): DEBUG: Wazuh home directory: /Library/Ossec 2021/10/15 08:14:56 wazuh-logcollector[1580] agent_op.c:215 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2021/10/15 08:14:56 wazuh-logcollector[1580] agent_op.c:219 at os_read_agent_profile(): ERROR: (1103): Could not open file 'queue/sockets/.agent_info' due to [(2)-(No such file or directory)]. 2021/10/15 08:14:56 wazuh-logcollector[1580] config.c:390 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2021/10/15 08:14:56 wazuh-logcollector[1580] config.c:399 at ReadConfig(): DEBUG: but agent has a profile name. 2021/10/15 08:14:56 wazuh-modulesd: ERROR: (1103): Could not open file 'queue/sockets/.agent_info' due to [(2)-(No such file or directory)]. 2021/10/15 08:14:57 wazuh-agentd: ERROR: (1103): Could not open file 'queue/sockets/.agent_info' due to [(2)-(No such file or directory)]. 2021/10/15 08:14:58 rootcheck: INFO: Rootcheck disabled. 2021/10/15 08:14:59 wazuh-logcollector[1634] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2021/10/15 08:14:59 wazuh-logcollector[1634] main.c:126 at main(): DEBUG: Wazuh home directory: /Library/Ossec 2021/10/15 08:14:59 wazuh-logcollector[1634] agent_op.c:215 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2021/10/15 08:14:59 wazuh-logcollector[1634] agent_op.c:234 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [-] 2021/10/15 08:14:59 wazuh-logcollector[1634] config.c:390 at ReadConfig(): DEBUG: agent_config element does not have any attributes.
----------------------------Captured stdout teardown----------------------------
Fri Oct 15 15:15:04 UTC 2021
----------------------------Captured stderr teardown----------------------------
2021-10-15 08:15:04,478 - wazuh_testing - DEBUG - Trucanted /Library/Ossec/logs/ossec.log 2021-10-15 08:15:04,478 - wazuh_testing - DEBUG - Stopping wazuh-logcollector 2021-10-15 08:15:04,517 - wazuh_testing - DEBUG - Restore local_internal_option to {'logcollector.debug': '2\n', 'logcollector.sample_log_length': '100\n', 'monitord.rotate_log': '0\n', 'agent.debug': '0\n'}
-----------------------------Captured log teardown------------------------------
DEBUG wazuh_testing:conftest.py:700 Trucanted /Library/Ossec/logs/ossec.log DEBUG wazuh_testing:conftest.py:674 Stopping wazuh-logcollector DEBUG wazuh_testing:conftest.py:724 Restore local_internal_option to {'logcollector.debug': '2\n', 'logcollector.sample_log_length': '100\n', 'monitord.rotate_log': '0\n', 'agent.debug': '0\n'}

-----------------------------Captured stdout setup------------------------------
Killing wazuh-modulesd... wazuh-logcollector not running... Killing wazuh-syscheckd... Killing wazuh-agentd... Killing wazuh-execd... Wazuh v4.3.0 Stopped Starting Wazuh v4.3.0... Started wazuh-execd... Started wazuh-agentd... Started wazuh-syscheckd... Started wazuh-logcollector... Started wazuh-modulesd... Completed.
-----------------------------Captured stderr setup------------------------------
2021/10/15 08:15:04 wazuh-logcollector[1689] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2021/10/15 08:15:04 wazuh-logcollector[1689] main.c:126 at main(): DEBUG: Wazuh home directory: /Library/Ossec 2021/10/15 08:15:04 wazuh-logcollector[1689] agent_op.c:215 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2021/10/15 08:15:04 wazuh-logcollector[1689] agent_op.c:234 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [-] 2021/10/15 08:15:04 wazuh-logcollector[1689] config.c:390 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2021/10/15 08:15:07 rootcheck: INFO: Rootcheck disabled. 2021/10/15 08:15:08 wazuh-logcollector[1791] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2021/10/15 08:15:08 wazuh-logcollector[1791] main.c:126 at main(): DEBUG: Wazuh home directory: /Library/Ossec 2021/10/15 08:15:08 wazuh-logcollector[1791] agent_op.c:215 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2021/10/15 08:15:08 wazuh-logcollector[1791] agent_op.c:234 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [-] 2021/10/15 08:15:08 wazuh-logcollector[1791] config.c:390 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2021-10-15 08:15:13,093 - wazuh_testing - DEBUG - Initializing file to monitor to /Library/Ossec/logs/ossec.log
-------------------------------Captured log setup-------------------------------
DEBUG wazuh_testing:conftest.py:692 Initializing file to monitor to /Library/Ossec/logs/ossec.log
------------------------------Captured stdout call------------------------------
Killing wazuh-modulesd... Killing wazuh-logcollector... Killing wazuh-syscheckd... Killing wazuh-agentd... Killing wazuh-execd... Wazuh v4.3.0 Stopped Timestamp Thread Type Activity PID TTL 2021-10-15 08:15:14.425834-0700 0xc2c13 Default 0x0 1871 0 appstoreagent: (Accounts) [com.apple.accounts:core] "The connection to ACDAccountStore was invalidated." 2021-10-15 08:15:14.427685-0700 0xc2c13 Error 0x230056 1871 0 appstoreagent: (Accounts) [com.apple.accounts:core] "Remote account store returned fatal error: Error Domain=NSCocoaErrorDomain Code=4099 "The connection to service on pid 0 named com.apple.accountsd.accountmanager was invalidated." UserInfo={NSDebugDescription=The connection to service on pid 0 named com.apple.accountsd.accountmanager was invalidated.}" 2021-10-15 08:15:14.428198-0700 0xc2c15 Error 0x230056 1871 0 appstoreagent: (AppleMediaServices) [com.apple.AppleMediaServices:accounts] ACAccountStore: Failed to fetch the cached account. error = Error Domain=com.apple.accounts Code=10002 "(null)" 2021-10-15 08:15:14.429008-0700 0xc2c16 Error 0x230056 1871 0 appstoreagent: (Accounts) [com.apple.accounts:core] "Remote account store returned fatal error: Error Domain=NSCocoaErrorDomain Code=4099 "The connection to service on pid 0 named com.apple.accountsd.accountmanager was invalidated." UserInfo={NSDebugDescription=The connection to service on pid 0 named com.apple.accountsd.accountmanager was invalidated.}" 2021-10-15 08:15:14.429529-0700 0xc2c13 Default 0x0 1871 0 appstoreagent: (Accounts) [com.apple.accounts:core] "The connection to ACDAccountStore was invalidated." 2021-10-15 08:15:14.430164-0700 0xc2c16 Error 0x230056 1871 0 appstoreagent: (Accounts) [com.apple.accounts:core] "Remote account store returned fatal error: Error Domain=NSCocoaErrorDomain Code=4099 "The connection to service on pid 0 named com.apple.accountsd.accountmanager was invalidated." UserInfo={NSDebugDescription=The connection to service on pid 0 named com.apple.accountsd.accountmanager was invalidated.}" 2021-10-15 08:15:14.430498-0700 0xc2c16 Error 0x230056 1871 0 appstoreagent: (AppleMediaServices) [com.apple.AppleMediaServices:accounts] ACAccount: [BC3555A3] ams_setActive:forMediaType: cannot set active on local account. 2021-10-15 08:15:14.430975-0700 0xc2c13 Default 0x0 1871 0 appstoreagent: (Accounts) [com.apple.accounts:core] "The connection to ACDAccountStore was invalidated." 2021-10-15 08:15:14.431572-0700 0xc2c16 Error 0x230056 1871 0 appstoreagent: (Accounts) [com.apple.accounts:core] "Remote account store returned fatal error: Error Domain=NSCocoaErrorDomain Code=4099 "The connection to service on pid 0 named com.apple.accountsd.accountmanager was invalidated." UserInfo={NSDebugDescription=The connection to service on pid 0 named com.apple.accountsd.accountmanager was invalidated.}" 2021-10-15 08:15:14.431969-0700 0xc2c16 Activity 0x230059 1871 0 appstoreagent: (Accounts) accounts/save-account 2021-10-15 08:15:14.432280-0700 0xc2c16 Default 0x230059 1871 0 appstoreagent: (Accounts) [com.apple.accounts:core] "Starting save for account <private>." 2021-10-15 08:15:14.432860-0700 0xc2c13 Default 0x0 1871 0 appstoreagent: (Accounts) [com.apple.accounts:core] "The connection to ACDAccountStore was invalidated." 2021-10-15 08:15:14.433689-0700 0xc2c13 Default 0x0 1871 0 appstoreagent: (Accounts) [com.apple.accounts:core] "The connection to ACDAccountStore was invalidated." 2021-10-15 08:15:14.434057-0700 0xc2c13 Error 0x230059 1871 0 appstoreagent: (Accounts) [com.apple.accounts:core] "Remote account store returned fatal error: Error Domain=NSCocoaErrorDomain Code=4099 "The connection to service on pid 0 named com.apple.accountsd.accountmanager was invalidated." UserInfo={NSDebugDescription=The connection to service on pid 0 named com.apple.accountsd.accountmanager was invalidated.}" 2021-10-15 08:15:14.434578-0700 0xc2c13 Default 0x230059 1871 0 appstoreagent: (Accounts) [com.apple.accounts:core] "Completed account save: NO - Error Domain=com.apple.accounts Code=10002." 2021-10-15 08:15:14.434971-0700 0xc2c15 Error 0x230059 1871 0 appstoreagent: (AppleMediaServices) [com.apple.AppleMediaServices:accounts] ACAccountStore: [BC3555A3] Failed to save an account. account = <ACAccount: 0x7ff47dd52be0 type = (null) | backingID = iTunesLocal-421A04EA-479A-4E46-B49D-556F7144518D | Local Account> | error = { Error domain=com.apple.accounts, code=10002 } 2021-10-15 08:15:14.435375-0700 0xc2c15 Error 0x230059 1871 0 appstoreagent: (AppleMediaServices) [com.apple.AppleMediaServices:accounts] ACAccountStore: Failed to create the local account. error = Error Domain=com.apple.accounts Code=10002 "(null)" 2021-10-15 08:15:14.436239-0700 0xc2c13 Default 0x0 1871 0 appstoreagent: (Accounts) [com.apple.accounts:core] "The connection to ACDAccountStore was invalidated." 2021-10-15 08:15:14.436588-0700 0xc2c13 Error 0x230056 1871 0 appstoreagent: (Accounts) [com.apple.accounts:core] "Remote account store returned fatal error: Error Domain=NSCocoaErrorDomain Code=4099 "The connection to service on pid 0 named com.apple.accountsd.accountmanager was invalidated." UserInfo={NSDebugDescription=The connection to service on pid 0 named com.apple.accountsd.accountmanager was invalidated.}" 2021-10-15 08:15:14.437044-0700 0xc2c15 Error 0x230056 1871 0 appstoreagent: (AppleMediaServices) [com.apple.AppleMediaServices:accounts] ACAccountStore: Failed to fetch the cached account. error = Error Domain=com.apple.accounts Code=10002 "(null)" 2021-10-15 08:15:14.437268-0700 0xc2c16 Error 0x230056 1871 0 appstoreagent: (AppleMediaServices) [com.apple.AppleMediaServices:accounts] ACAccountStore: [BC3555A3] Failed to create/fetch the local account. 2021-10-15 08:15:14.438351-0700 0xc2c13 Default 0x0 1871 0 appstoreagent: (Accounts) [com.apple.accounts:core] "The connection to ACDAccountStore was invalidated." 2021-10-15 08:15:14.438606-0700 0xc2c13 Error 0x230056 1871 0 appstoreagent: (Accounts) [com.apple.accounts:core] "Remote account store returned fatal error: Error Domain=NSCocoaErrorDomain Code=4099 "The connection to service on pid 0 named com.apple.accountsd.accountmanager was invalidated." UserInfo={NSDebugDescription=The connection to service on pid 0 named com.apple.accountsd.accountmanager was invalidated.}" 2021-10-15 08:15:14.438858-0700 0xc2c15 Error 0x230056 1871 0 appstoreagent: (AppleMediaServices) [com.apple.AppleMediaServices:accounts] ACAccountStore: Failed to fetch the cached account. error = Error Domain=com.apple.accounts Code=10002 "(null)" 2021-10-15 08:15:14.439731-0700 0xc2c16 Error 0x230056 1871 0 appstoreagent: (Accounts) [com.apple.accounts:core] "Remote account store returned fatal error: Error Domain=NSCocoaErrorDomain Code=4099 "The connection to service on pid 0 named com.apple.accountsd.accountmanager was invalidated." UserInfo={NSDebugDescription=The connection to service on pid 0 named com.apple.accountsd.accountmanager was invalidated.}" 2021-10-15 08:15:14.440025-0700 0xc2c13 Default 0x0 1871 0 appstoreagent: (Accounts) [com.apple.accounts:core] "The connection to ACDAccountStore was invalidated." 2021-10-15 08:15:14.441257-0700 0xc2c16 Error 0x230056 1871 0 appstoreagent: (Accounts) [com.apple.accounts:core] "Remote account store returned fatal error: Error Domain=NSCocoaErrorDomain Code=4099 "The connection to service on pid 0 named com.apple.accountsd.accountmanager was invalidated." UserInfo={NSDebugDescription=The connection to service on pid 0 named com.apple.accountsd.accountmanager was invalidated.}" 2021-10-15 08:15:14.441409-0700 0xc2c16 Error 0x230056 1871 0 appstoreagent: (AppleMediaServices) [com.apple.AppleMediaServices:accounts] ACAccount: [BC3555A3] ams_setActive:forMediaType: cannot set active on local account. 2021-10-15 08:15:14.442008-0700 0xc2c13 Default 0x0 1871 0 appstoreagent: (Accounts) [com.apple.accounts:core] "The connection to ACDAccountStore was invalidated." 2021-10-15 08:15:14.442449-0700 0xc2c16 Error 0x230056 1871 0 appstoreagent: (Accounts) [com.apple.accounts:core] "Remote account store returned fatal error: Error Domain=NSCocoaErrorDomain Code=4099 "The connection to service on pid 0 named com.apple.accountsd.accountmanager was invalidated." UserInfo={NSDebugDescription=The connection to service on pid 0 named com.apple.accountsd.accountmanager was invalidated.}" 2021-10-15 08:15:14.442762-0700 0xc2c13 Default 0x0 1871 0 appstoreagent: (Accounts) [com.apple.accounts:core] "The connection to ACDAccountStore was invalidated." 2021-10-15 08:15:14.443125-0700 0xc2c16 Activity 0x23005a 1871 0 appstoreagent: (Accounts) accounts/save-account 2021-10-15 08:15:14.443293-0700 0xc2c16 Default 0x23005a 1871 0 appstoreagent: (Accounts) [com.apple.accounts:core] "Starting save for account <private>." 2021-10-15 08:15:14.450175-0700 0xc2c43 Activity 0x230070 1894 0 wazuh-logcollector: (libsystem_info.dylib) Retrieve Group by Name 2021-10-15 08:15:14.480923-0700 0xc2c13 Default 0x0 1871 0 appstoreagent: (Accounts) [com.apple.accounts:core] "The connection to ACDAccountStore was invalidated." 2021-10-15 08:15:14.481049-0700 0xc2c13 Error 0x23005a 1871 0 appstoreagent: (Accounts) [com.apple.accounts:core] "Remote account store returned fatal error: Error Domain=NSCocoaErrorDomain Code=4099 "The connection to service on pid 0 named com.apple.accountsd.accountmanager was invalidated." UserInfo={NSDebugDescription=The connection to service on pid 0 named com.apple.accountsd.accountmanager was invalidated.}" 2021-10-15 08:15:14.481087-0700 0xc2c13 Default 0x23005a 1871 0 appstoreagent: (Accounts) [com.apple.accounts:core] "Completed account save: NO - Error Domain=com.apple.accounts Code=10002." 2021-10-15 08:15:14.481919-0700 0xc2c13 Error 0x23005a 1871 0 appstoreagent: (AppleMediaServices) [com.apple.AppleMediaServices:accounts] ACAccountStore: [BC3555A3] Failed to save an account. account = <ACAccount: 0x7ff47dc47110 type = (null) | backingID = iTunesLocal-421A04EA-479A-4E46-B49D-556F7144518D | Local Account> | error = { Error domain=com.apple.accounts, code=10002 } 2021-10-15 08:15:14.481974-0700 0xc2c13 Error 0x23005a 1871 0 appstoreagent: (AppleMediaServices) [com.apple.AppleMediaServices:accounts] ACAccountStore: Failed to create the local account. error = Error Domain=com.apple.accounts Code=10002 "(null)" 2021-10-15 08:15:14.482370-0700 0xc2c13 Default 0x0 1871 0 appstoreagent: (Accounts) [com.apple.accounts:core] "The connection to ACDAccountStore was invalidated." 2021-10-15 08:15:14.482680-0700 0xc2c13 Error 0x230056 1871 0 appstoreagent: (Accounts) [com.apple.accounts:core] "Remote account store returned fatal error: Error Domain=NSCocoaErrorDomain Code=4099 "The connection to service on pid 0 named com.apple.accountsd.accountmanager was invalidated." UserInfo={NSDebugDescription=The connection to service on pid 0 named com.apple.accountsd.accountmanager was invalidated.}" 2021-10-15 08:15:14.483143-0700 0xc2c13 Error 0x230056 1871 0 appstoreagent: (AppleMediaServices) [com.apple.AppleMediaServices:accounts] ACAccountStore: Failed to fetch the cached account. error = Error Domain=com.apple.accounts Code=10002 "(null)" 2021-10-15 08:15:14.483258-0700 0xc2c16 Error 0x230056 1871 0 appstoreagent: (AppleMediaServices) [com.apple.AppleMediaServices:accounts] ACAccountStore: [BC3555A3] Failed to create/fetch the local account. 2021-10-15 08:15:14.485600-0700 0xc2c16 Activity 0x23005b 1871 0 appstoreagent: (AuthKit) authkit/fetch-anisette 2021-10-15 08:15:14.492347-0700 0x10ad Default 0x0 955 0 storagekitd: <Security> Rejecting connection due to lack of entitlement 2021-10-15 08:15:14.493905-0700 0x10ac Default 0x0 955 0 storagekitd: <Security> Rejecting connection due to lack of entitlement 2021-10-15 08:15:14.495791-0700 0xc2c13 Default 0x230056 1871 0 appstoreagent: (StorageKit) Daemon failed to respond. 2021-10-15 08:15:14.496067-0700 0xc2c13 Default 0x230056 1871 0 appstoreagent: (StorageKit) -[SKHelperClient diskForPath:withCallbackBlock:]_block_invoke_3 ** error: Error Domain=NSCocoaErrorDomain Code=4097 "connection to service on pid 0 named com.apple.storagekitd" UserInfo={NSDebugDescription=connection to service on pid 0 named com.apple.storagekitd} 2021-10-15 08:15:14.496685-0700 0xc2c0c Default 0x0 1871 0 appstoreagent: (StorageKit) Interrupted! 2021-10-15 08:15:14.497378-0700 0xc2c0c Default 0x0 1871 0 appstoreagent: (StorageKit) Interrupted! 2021-10-15 08:15:14.497672-0700 0xc2c16 Error 0x230056 1871 0 appstoreagent: (AuthKit) [com.apple.authkit:core] localUserUUID is nil 2021-10-15 08:15:14.501096-0700 0xc2c0f Default 0x230056 1871 0 appstoreagent: (AppleMediaServices) [com.apple.AppleMediaServices:bag] AMSBagNetworkDataSource: [8697AE97] Issuing a bag request. attempt = 0 2021-10-15 08:15:14.501550-0700 0xc2c0f Default 0x230056 1871 0 appstoreagent: (AppleMediaServices) [com.apple.AppleMediaServices:general] AMSURLSession: [BC3555A3] Preparing request: <AMSURLRequest: 0x7ff47dd531b0> { URL: https://bag.itunes.apple.com/bag.xml?os=OS%20X&osVersion=10.15.1&deviceClass=Macintosh&product=MacAppStore&productVersion=3.0&profile=appstored&profileVersion=1&format=json } 2021-10-15 08:15:14.502204-0700 0xc2c0f Default 0x230056 1871 0 appstoreagent: (AppleMediaServices) [com.apple.AppleMediaServices:general] AMSURLSession: [BC3555A3] Task created: LocalDataTask <4EC7477B-8BF0-4D92-B30C-FE1688699C68>.<1> Session: <__NSURLSessionLocal: 0x7ff47dd3ce40> 2021-10-15 08:15:14.502283-0700 0xc2c0f Default 0x230056 1871 0 appstoreagent: (CFNetwork) Task <4EC7477B-8BF0-4D92-B30C-FE1688699C68>.<1> resuming, QOS(0x15) Voucher <private> 2021-10-15 08:15:14.506680-0700 0xc2c15 Default 0x230056 1871 0 appstoreagent: (CFNetwork) [com.apple.CFNetwork:ATS] Task <4EC7477B-8BF0-4D92-B30C-FE1688699C68>.<1> {strength 0, tls 4, ct 0, sub 0, sig 1, ciphers 0, bundle 1, builtin 0} 2021-10-15 08:15:14.507683-0700 0xc2c15 Activity 0x23005c 1871 0 appstoreagent: (libsystem_info.dylib) Retrieve service by name 2021-10-15 08:15:14.508584-0700 0xc2727 Default 0x23005c 121 0 opendirectoryd: [com.apple.opendirectoryd:session] getservbyname failed with result Not Found 2021-10-15 08:15:14.510375-0700 0xc2c15 Default 0x230056 1871 0 appstoreagent: (CFNetwork) Connection 1: enabling TLS 2021-10-15 08:15:14.510655-0700 0xc2c15 Default 0x230056 1871 0 appstoreagent: (CFNetwork) Connection 1: starting, TC(0x0) 2021-10-15 08:15:14.511071-0700 0xc2c15 Default 0x230056 1871 0 appstoreagent: (libnetwork.dylib) [com.apple.network:] [C1 0709FDA9-A910-460A-90F9-0D03BBFD8F6F Hostname#807c3dc8:443 tcp, url hash: a743a9cc, tls, indefinite] start 2021-10-15 08:15:14.511894-0700 0xc2c15 Default 0x230056 1871 0 appstoreagent: (libnetwork.dylib) [com.apple.network:] nw_connection_report_state_with_handler_on_nw_queue [C1] reporting state preparing 2021-10-15 08:15:14.513056-0700 0x3ff Default 0x0 214 0 mDNSResponder: [com.apple.mDNSResponder:Default] [R24379] DNSServiceCreateConnection START PID[1871](appstoreagent) 2021-10-15 08:15:14.513971-0700 0x3ff Default 0x0 214 0 mDNSResponder: [com.apple.mDNSResponder:Default] [R24380] DNSServiceGetAddrInfo(C000D000, 0, 0, <private>) START PID[1871](appstoreagent) 2021-10-15 08:15:14.514046-0700 0x3ff Default 0x0 214 0 mDNSResponder: [com.apple.mDNSResponder:Default] [R24380->Q23922] GetServerForQuestion: 0x7fa1d2003200 DNS server (0x7fa1d150c2e0) <private>:53 (Penalty Time Left 0) (Scope None:0x0:-1) for <private> (AAAA) 2021-10-15 08:15:14.514074-0700 0x3ff Default 0x0 214 0 mDNSResponder: [com.apple.mDNSResponder:Default] [Q23922] ShouldSuppressUnicastQuery: Query suppressed for <private> AAAA (AAAA records are unusable) 2021-10-15 08:15:14.514102-0700 0x3ff Default 0x0 214 0 mDNSResponder: [com.apple.mDNSResponder:Default] [R24380->Q55419] GetServerForQuestion: 0x7fa1d201b600 DNS server (0x7fa1d150c2e0) <private>:53 (Penalty Time Left 0) (Scope None:0x0:-1) for <private> (Addr) 2021-10-15 08:15:14.514850-0700 0x3ff Default 0x0 214 0 mDNSResponder: [com.apple.mDNSResponder:Default] [R24380->Q23922] GenerateNegativeResponse: Generating negative response for question <private> (AAAA) 2021-10-15 08:15:14.514956-0700 0x3ff Default 0x0 214 0 mDNSResponder: [com.apple.mDNSResponder:Default] [R24380->Q23922] DNSServiceGetAddrInfo(<private>, AAAA) RESULT ADD interface 0: (mortal)<private> 2021-10-15 08:15:14.515001-0700 0x3ff Default 0x0 214 0 mDNSResponder: [com.apple.mDNSResponder:Default] [R24380->Q55419] DNSServiceGetAddrInfo(<private>, Addr) RESULT ADD interface 0: (immortal)<private> 2021-10-15 08:15:14.515079-0700 0x3ff Default 0x0 214 0 mDNSResponder: [com.apple.mDNSResponder:Default] [R24380->Q55419] AnswerQuestionByFollowingCNAME: 0x7fa1d201b600 <private> (Addr) following CNAME referral 0 for <private> 2021-10-15 08:15:14.515122-0700 0x3ff Default 0x0 214 0 mDNSResponder: [com.apple.mDNSResponder:Default] [R24380->Q9006] GetServerForQuestion: 0x7fa1d201b600 DNS server (0x7fa1d150c2e0) <private>:53 (Penalty Time Left 0) (Scope None:0x0:-1) for <private> (Addr) 2021-10-15 08:15:14.515158-0700 0x3ff Default 0x0 214 0 mDNSResponder: [com.apple.mDNSResponder:Default] [R24380->Q9006] DNSServiceGetAddrInfo(<private>, Addr) RESULT ADD interface 0: (immortal)<private> 2021-10-15 08:15:14.515189-0700 0x3ff Default 0x0 214 0 mDNSResponder: [com.apple.mDNSResponder:Default] [R24380->Q9006] AnswerQuestionByFollowingCNAME: 0x7fa1d201b600 <private> (Addr) following CNAME referral 1 for <private> 2021-10-15 08:15:14.515222-0700 0x3ff Default 0x0 214 0 mDNSResponder: [com.apple.mDNSResponder:Default] [R24380->Q10833] GetServerForQuestion: 0x7fa1d201b600 DNS server (0x7fa1d150c2e0) <private>:53 (Penalty Time Left 0) (Scope None:0x0:-1) for <private> (Addr) 2021-10-15 08:15:14.515257-0700 0x3ff Default 0x0 214 0 mDNSResponder: [com.apple.mDNSResponder:Default] [R24380->Q10833] DNSServiceGetAddrInfo(<private>, Addr) RESULT ADD interface 0: (immortal)<private> 2021-10-15 08:15:14.515288-0700 0x3ff Default 0x0 214 0 mDNSResponder: [com.apple.mDNSResponder:Default] [R24380->Q10833] AnswerQuestionByFollowingCNAME: 0x7fa1d201b600 <private> (Addr) following CNAME referral 2 for <private> 2021-10-15 08:15:14.515320-0700 0x3ff Default 0x0 214 0 mDNSResponder: [com.apple.mDNSResponder:Default] [R24380->Q31879] GetServerForQuestion: 0x7fa1d201b600 DNS server (0x7fa1d150c2e0) <private>:53 (Penalty Time Left 0) (Scope None:0x0:-1) for <private> (Addr) 2021-10-15 08:15:14.516669-0700 0x3ff Default 0x0 214 0 mDNSResponder: [com.apple.mDNSResponder:Default] [R24380->Q31879] DNSServiceGetAddrInfo(<private>, Addr) RESULT ADD interface 0: (immortal)<private> 2021-10-15 08:15:14.517274-0700 0xc2c15 Default 0x230056 1871 0 appstoreagent: (CFNetwork) Task <4EC7477B-8BF0-4D92-B30C-FE1688699C68>.<1> setting up Connection 1 2021-10-15 08:15:14.517877-0700 0x3ff Default 0x0 214 0 mDNSResponder: [com.apple.mDNSResponder:Default] [R24379] DNSServiceCreateConnection STOP PID[1871](appstoreagent) 2021-10-15 08:15:14.517941-0700 0x3ff Default 0x0 214 0 mDNSResponder: [com.apple.mDNSResponder:Default] [R24380] DNSServiceGetAddrInfo(<private>) STOP PID[1871](appstoreagent) 2021-10-15 08:15:14.536205-0700 0xc2c15 Default 0x0 1871 0 appstoreagent: (libnetwork.dylib) [com.apple.network:] nw_socket_handle_socket_event [C1.1:3] Socket received CONNECTED event 2021-10-15 08:15:14.536410-0700 0xc2c15 Default 0x0 1871 0 appstoreagent: (libnetwork.dylib) [com.apple.network:] nw_flow_connected [C1.1 IPv4#4bfbe0f3:443 in_progress socket-flow (satisfied (Path is satisfied), interface: en0, ipv4, dns)] Transport protocol connected 2021-10-15 08:15:14.536903-0700 0xc2c15 Default 0x0 1871 0 appstoreagent: (libboringssl.dylib) [com.apple.network.boringssl:BoringSSL] boringssl_context_set_handshake_config(1472) [0x7ff47dd7cb90] set tls_handshake_config_standard 2021-10-15 08:15:14.536965-0700 0xc2c15 Default 0x0 1871 0 appstoreagent: (libboringssl.dylib) [com.apple.network.boringssl:BoringSSL] boringssl_context_set_min_version(326) [0x7ff47dd7cb90] set 0x0301 2021-10-15 08:15:14.537001-0700 0xc2c15 Default 0x0 1871 0 appstoreagent: (libboringssl.dylib) [com.apple.network.boringssl:BoringSSL] boringssl_context_set_max_version(310) [0x7ff47dd7cb90] set 0x0304 2021-10-15 08:15:14.537572-0700 0xc2c15 Default 0x0 1871 0 appstoreagent: (libboringssl.dylib) [com.apple.network.boringssl:BoringSSL] boringssl_context_set_cipher_suites(844) [0x7ff47dd7cb90] Ciphersuite string: AEAD-AES128-GCM-SHA256:AEAD-AES256-GCM-SHA384:AEAD-CHACHA20-POLY1305-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-CHACHA20-POLY1305:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:AES256-SHA:AES128-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:DES-CBC3-SHA 2021-10-15 08:15:14.537664-0700 0xc2c15 Default 0x0 1871 0 appstoreagent: (libboringssl.dylib) [com.apple.network.boringssl:BoringSSL] boringssl_context_set_remote_address(2556) [0x7ff47dd7cb90] Saving remote IPv4 address 2021-10-15 08:15:14.537730-0700 0xc2c15 Default 0x0 1871 0 appstoreagent: (libboringssl.dylib) [com.apple.network.boringssl:BoringSSL] boringssl_session_install_association_state(1289) [0x7ff47dd7cb90] Client session cache miss 2021-10-15 08:15:14.537766-0700 0xc2c15 Default 0x0 1871 0 appstoreagent: (libboringssl.dylib) [com.apple.network.boringssl:BoringSSL] boringssl_session_set_peer_hostname(1181) [0x7ff47dd7cb90] SNI <private> 2021-10-15 08:15:14.538352-0700 0xc2c15 Default 0x0 1871 0 appstoreagent: (libboringssl.dylib) [com.apple.network.boringssl:BoringSSL] boringssl_context_set_min_version(326) [C1.1:2][0x7ff47dd7cb90] set 0x0301 2021-10-15 08:15:14.538413-0700 0xc2c15 Default 0x0 1871 0 appstoreagent: (libboringssl.dylib) [com.apple.network.boringssl:BoringSSL] boringssl_context_set_session_ticket_enabled(441) [C1.1:2][0x7ff47dd7cb90] set false 2021-10-15 08:15:14.538447-0700 0xc2c15 Default 0x0 1871 0 appstoreagent: (libboringssl.dylib) [com.apple.network.boringssl:BoringSSL] boringssl_context_set_false_start(411) [C1.1:2][0x7ff47dd7cb90] set false 2021-10-15 08:15:14.538478-0700 0xc2c15 Default 0x0 1871 0 appstoreagent: (libboringssl.dylib) [com.apple.network.boringssl:BoringSSL] boringssl_context_set_enforce_ev(401) [C1.1:2][0x7ff47dd7cb90] set false 2021-10-15 08:15:14.538511-0700 0xc2c15 Default 0x0 1871 0 appstoreagent: (libboringssl.dylib) [com.apple.network.boringssl:BoringSSL] boringssl_context_set_ats_enforced(1312) [C1.1:2][0x7ff47dd7cb90] set false 2021-10-15 08:15:14.539181-0700 0xc2c15 Default 0x0 1871 0 appstoreagent: (libboringssl.dylib) [com.apple.network.boringssl:BoringSSL] boringssl_context_set_ats_minimum_rsa_key_size(1321) [C1.1:2][0x7ff47dd7cb90] set 0 2021-10-15 08:15:14.539233-0700 0xc2c15 Default 0x0 1871 0 appstoreagent: (libboringssl.dylib) [com.apple.network.boringssl:BoringSSL] boringssl_context_set_ats_minimum_ecdsa_key_size(1330) [C1.1:2][0x7ff47dd7cb90] set 0 2021-10-15 08:15:14.539265-0700 0xc2c15 Default 0x0 1871 0 appstoreagent: (libboringssl.dylib) [com.apple.network.boringssl:BoringSSL] boringssl_context_set_ats_minimum_signature_algorithm(1340) [C1.1:2][0x7ff47dd7cb90] set 0 2021-10-15 08:15:14.539296-0700 0xc2c15 Default 0x0 1871 0 appstoreagent: (libboringssl.dylib) [com.apple.network.boringssl:BoringSSL] boringssl_session_set_peer_hostname(1181) [C1.1:2][0x7ff47dd7cb90] SNI <private> 2021-10-15 08:15:14.539346-0700 0xc2c15 Default 0x0 1871 0 appstoreagent: (libboringssl.dylib) [com.apple.network.boringssl:BoringSSL] boringssl_context_set_cipher_suites(844) [C1.1:2][0x7ff47dd7cb90] Ciphersuite string: AEAD-AES128-GCM-SHA256:AEAD-AES256-GCM-SHA384:AEAD-CHACHA20-POLY1305-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-CHACHA20-POLY1305:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:AES256-SHA:AES128-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:DES-CBC3-SHA 2021-10-15 08:15:14.540620-0700 0xc2c15 Default 0x0 1871 0 appstoreagent: (libboringssl.dylib) [com.apple.network.boringssl:BoringSSL] nw_protocol_boringssl_begin_connection(495) [C1.1:2][0x7ff47dd7cb90] early data disabled 2021-10-15 08:15:14.541090-0700 0xc2c15 Default 0x0 1871 0 appstoreagent: (libboringssl.dylib) [com.apple.network.boringssl:BoringSSL] boringssl_context_info_handler(1971) [C1.1:2][0x7ff47dd7cb90] Client handshake started 2021-10-15 08:15:14.541242-0700 0xc2c15 Default 0x0 1871 0 appstoreagent: (libboringssl.dylib) [com.apple.network.boringssl:BoringSSL] boringssl_context_message_handler(2259) [C1.1:2][0x7ff47dd7cb90] Writing SSL3_RT_HANDSHAKE 512 bytes 2021-10-15 08:15:14.541631-0700 0xc2c15 Default 0x0 1871 0 appstoreagent: (libboringssl.dylib) [com.apple.network.boringssl:BoringSSL] boringssl_context_info_handler(1984) [C1.1:2][0x7ff47dd7cb90] Client handshake state: TLS client enter_early_data 2021-10-15 08:15:14.541697-0700 0xc2c15 Default 0x0 1871 0 appstoreagent: (libboringssl.dylib) [com.apple.network.boringssl:BoringSSL] boringssl_context_add_handshake_message_pending(579) [C1.1:2][0x7ff47dd7cb90] Adding message(1) 2021-10-15 08:15:14.542176-0700 0xc2c15 Default 0x0 1871 0 appstoreagent: (libboringssl.dylib) [com.apple.network.boringssl:BoringSSL] boringssl_context_info_handler(1984) [C1.1:2][0x7ff47dd7cb90] Client handshake state: TLS client read_server_hello 2021-10-15 08:15:14.542228-0700 0xc2c15 Default 0x0 1871 0 appstoreagent: (libboringssl.dylib) [com.apple.network.boringssl:BoringSSL] boringssl_context_add_handshake_message_pending(579) [C1.1:2][0x7ff47dd7cb90] Adding message(2) 2021-10-15 08:15:14.542402-0700 0xc2c15 Default 0x0 1871 0 appstoreagent: (libboringssl.dylib) [com.apple.network.boringssl:BoringSSL] boringssl_session_handshake_incomplete(191) [C1.1:2][0x7ff47dd7cb90] Early handshake return caused by SSL_ERROR_WANT_READ [2] 2021-10-15 08:15:14.542455-0700 0xc2c15 Default 0x0 1871 0 appstoreagent: (libboringssl.dylib) [com.apple.network.boringssl:BoringSSL] boringssl_session_handshake_incomplete(191) [C1.1:2][0x7ff47dd7cb90] Early handshake return caused by SSL_ERROR_WANT_READ [2] 2021-10-15 08:15:14.559053-0700 0xc2c15 Default 0x0 1871 0 appstoreagent: (libboringssl.dylib) [com.apple.network.boringssl:BoringSSL] boringssl_context_message_handler(2259) [C1.1:2][0x7ff47dd7cb90] Reading SSL3_RT_HANDSHAKE 122 bytes 2021-10-15 08:15:14.559131-0700 0xc2c15 Default 0x0 1871 0 appstoreagent: (libboringssl.dylib) [com.apple.network.boringssl:BoringSSL] boringssl_context_info_handler(1984) [C1.1:2][0x7ff47dd7cb90] Client handshake state: TLS 1.3 client read_hello_retry_request 2021-10-15 08:15:14.559180-0700 0xc2c15 Default 0x0 1871 0 appstoreagent: (libboringssl.dylib) [com.apple.network.boringssl:BoringSSL] boringssl_context_add_handshake_message_pending(579) [C1.1:2][0x7ff47dd7cb90] Adding message(2) 2021-10-15 08:15:14.559223-0700 0xc2c15 Default 0x0 1871 0 appstoreagent: (libboringssl.dylib) [com.apple.network.boringssl:BoringSSL] boringssl_context_message_handler(2259) [C1.1:2][0x7ff47dd7cb90] Writing SSL3_RT_CHANGE_CIPHER_SPEC 1 bytes 2021-10-15 08:15:14.559262-0700 0xc2c15 Default 0x0 1871 0 appstoreagent: (libboringssl.dylib) [com.apple.network.boringssl:BoringSSL] boringssl_context_info_handler(1984) [C1.1:2][0x7ff47dd7cb90] Client handshake state: TLS 1.3 client read_server_hello 2021-10-15 08:15:14.559479-0700 0xc2c15 Default 0x0 1871 0 appstoreagent: (libboringssl.dylib) [com.apple.network.boringssl:BoringSSL] boringssl_context_info_handler(1984) [C1.1:2][0x7ff47dd7cb90] Client handshake state: TLS 1.3 client read_encrypted_extensions 2021-10-15 08:15:14.559515-0700 0xc2c15 Default 0x0 1871 0 appstoreagent: (libboringssl.dylib) [com.apple.network.boringssl:BoringSSL] boringssl_context_message_handler(2259) [C1.1:2][0x7ff47dd7cb90] Reading SSL3_RT_HANDSHAKE 29 bytes 2021-10-15 08:15:14.559630-0700 0xc2c15 Default 0x0 1871 0 appstoreagent: (libboringssl.dylib) [com.apple.network.boringssl:BoringSSL] boringssl_context_info_handler(1984) [C1.1:2][0x7ff47dd7cb90] Client handshake state: TLS 1.3 client read_certificate_request 2021-10-15 08:15:14.559874-0700 0xc2c15 Default 0x0 1871 0 appstoreagent: (libboringssl.dylib) [com.apple.network.boringssl:BoringSSL] boringssl_session_handshake_incomplete(191) [C1.1:2][0x7ff47dd7cb90] Early handshake return caused by SSL_ERROR_WANT_READ [2] Starting Wazuh v4.3.0... Started wazuh-execd... Started wazuh-agentd... Started wazuh-syscheckd... Started wazuh-logcollector... Started wazuh-modulesd... Completed.
------------------------------Captured stderr call------------------------------
2021/10/15 08:15:14 wazuh-logcollector[1894] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2021/10/15 08:15:14 wazuh-logcollector[1894] main.c:126 at main(): DEBUG: Wazuh home directory: /Library/Ossec 2021/10/15 08:15:14 wazuh-logcollector[1894] agent_op.c:215 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2021/10/15 08:15:14 wazuh-logcollector[1894] agent_op.c:219 at os_read_agent_profile(): ERROR: (1103): Could not open file 'queue/sockets/.agent_info' due to [(2)-(No such file or directory)]. 2021/10/15 08:15:14 wazuh-logcollector[1894] config.c:390 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2021/10/15 08:15:14 wazuh-logcollector[1894] config.c:399 at ReadConfig(): DEBUG: but agent has a profile name. 2021/10/15 08:15:14 wazuh-agentd: ERROR: (1103): Could not open file 'queue/sockets/.agent_info' due to [(2)-(No such file or directory)]. 2021/10/15 08:15:14 wazuh-syscheckd: ERROR: (1103): Could not open file 'queue/sockets/.agent_info' due to [(2)-(No such file or directory)]. 2021/10/15 08:15:14 wazuh-syscheckd: ERROR: (1103): Could not open file 'queue/sockets/.agent_info' due to [(2)-(No such file or directory)]. 2021/10/15 08:15:14 wazuh-logcollector[1907] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2021/10/15 08:15:14 wazuh-logcollector[1907] main.c:126 at main(): DEBUG: Wazuh home directory: /Library/Ossec 2021/10/15 08:15:14 wazuh-logcollector[1907] agent_op.c:215 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2021/10/15 08:15:14 wazuh-logcollector[1907] agent_op.c:219 at os_read_agent_profile(): ERROR: (1103): Could not open file 'queue/sockets/.agent_info' due to [(2)-(No such file or directory)]. 2021/10/15 08:15:14 wazuh-logcollector[1907] config.c:390 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2021/10/15 08:15:14 wazuh-logcollector[1907] config.c:399 at ReadConfig(): DEBUG: but agent has a profile name. 2021/10/15 08:15:14 wazuh-modulesd: ERROR: (1103): Could not open file 'queue/sockets/.agent_info' due to [(2)-(No such file or directory)]. 2021/10/15 08:15:15 wazuh-agentd: ERROR: (1103): Could not open file 'queue/sockets/.agent_info' due to [(2)-(No such file or directory)]. 2021/10/15 08:15:16 rootcheck: INFO: Rootcheck disabled. 2021/10/15 08:15:17 wazuh-logcollector[1960] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2021/10/15 08:15:17 wazuh-logcollector[1960] main.c:126 at main(): DEBUG: Wazuh home directory: /Library/Ossec 2021/10/15 08:15:17 wazuh-logcollector[1960] agent_op.c:215 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2021/10/15 08:15:17 wazuh-logcollector[1960] agent_op.c:234 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [-] 2021/10/15 08:15:17 wazuh-logcollector[1960] config.c:390 at ReadConfig(): DEBUG: agent_config element does not have any attributes.
----------------------------Captured stderr teardown----------------------------
2021-10-15 08:15:21,958 - wazuh_testing - DEBUG - Trucanted /Library/Ossec/logs/ossec.log
-----------------------------Captured log teardown------------------------------
DEBUG wazuh_testing:conftest.py:700 Trucanted /Library/Ossec/logs/ossec.log

-----------------------------Captured stderr setup------------------------------
2021-10-15 08:15:21,981 - wazuh_testing - DEBUG - Initializing file to monitor to /Library/Ossec/logs/ossec.log
-------------------------------Captured log setup-------------------------------
DEBUG wazuh_testing:conftest.py:692 Initializing file to monitor to /Library/Ossec/logs/ossec.log
------------------------------Captured stdout call------------------------------
Starting Wazuh v4.3.0... wazuh-execd already running... wazuh-agentd already running... wazuh-syscheckd already running... Started wazuh-logcollector... wazuh-modulesd already running... Completed.
------------------------------Captured stderr call------------------------------
2021/10/15 08:15:26 wazuh-logcollector[2002] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2021/10/15 08:15:26 wazuh-logcollector[2002] main.c:126 at main(): DEBUG: Wazuh home directory: /Library/Ossec 2021/10/15 08:15:26 wazuh-logcollector[2002] agent_op.c:215 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2021/10/15 08:15:26 wazuh-logcollector[2002] agent_op.c:234 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [-] 2021/10/15 08:15:26 wazuh-logcollector[2002] config.c:390 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2021/10/15 08:15:27 wazuh-logcollector[2018] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2021/10/15 08:15:27 wazuh-logcollector[2018] main.c:126 at main(): DEBUG: Wazuh home directory: /Library/Ossec 2021/10/15 08:15:27 wazuh-logcollector[2018] agent_op.c:215 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2021/10/15 08:15:27 wazuh-logcollector[2018] agent_op.c:234 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [-] 2021/10/15 08:15:27 wazuh-logcollector[2018] config.c:390 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2021/10/15 08:15:27 wazuh-logcollector[2049] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2021/10/15 08:15:27 wazuh-logcollector[2049] main.c:126 at main(): DEBUG: Wazuh home directory: /Library/Ossec 2021/10/15 08:15:27 wazuh-logcollector[2049] agent_op.c:215 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2021/10/15 08:15:27 wazuh-logcollector[2049] agent_op.c:234 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [-] 2021/10/15 08:15:27 wazuh-logcollector[2049] config.c:390 at ReadConfig(): DEBUG: agent_config element does not have any attributes.
----------------------------Captured stderr teardown----------------------------
2021-10-15 08:15:30,457 - wazuh_testing - DEBUG - Trucanted /Library/Ossec/logs/ossec.log
-----------------------------Captured log teardown------------------------------
DEBUG wazuh_testing:conftest.py:700 Trucanted /Library/Ossec/logs/ossec.log

-----------------------------Captured stderr setup------------------------------
2021-10-15 08:15:30,481 - wazuh_testing - DEBUG - Initializing file to monitor to /Library/Ossec/logs/ossec.log
-------------------------------Captured log setup-------------------------------
DEBUG wazuh_testing:conftest.py:692 Initializing file to monitor to /Library/Ossec/logs/ossec.log
------------------------------Captured stdout call------------------------------
Starting Wazuh v4.3.0... wazuh-execd already running... wazuh-agentd already running... wazuh-syscheckd already running... wazuh-logcollector already running... wazuh-modulesd already running... Completed.
------------------------------Captured stderr call------------------------------
2021/10/15 08:15:39 wazuh-logcollector[2085] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2021/10/15 08:15:39 wazuh-logcollector[2085] main.c:126 at main(): DEBUG: Wazuh home directory: /Library/Ossec 2021/10/15 08:15:39 wazuh-logcollector[2085] agent_op.c:215 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2021/10/15 08:15:39 wazuh-logcollector[2085] agent_op.c:234 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [-] 2021/10/15 08:15:39 wazuh-logcollector[2085] config.c:390 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2021/10/15 08:15:39 wazuh-logcollector[2101] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2021/10/15 08:15:39 wazuh-logcollector[2101] main.c:126 at main(): DEBUG: Wazuh home directory: /Library/Ossec 2021/10/15 08:15:39 wazuh-logcollector[2101] agent_op.c:215 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2021/10/15 08:15:39 wazuh-logcollector[2101] agent_op.c:234 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [-] 2021/10/15 08:15:39 wazuh-logcollector[2101] config.c:390 at ReadConfig(): DEBUG: agent_config element does not have any attributes.
-------------------------------Captured log call--------------------------------
WARNING root:utils.py:41 Exception: "Process log is running at start. assert 1 == 0 + where 1 = len([{'name': 'log', 'pid': 2056}])". 4/5 remaining attempts. Waiting 2 seconds.
----------------------------Captured stdout teardown----------------------------
Killing wazuh-modulesd... Killing wazuh-logcollector... Killing wazuh-syscheckd... Killing wazuh-agentd... Killing wazuh-execd... Wazuh v4.3.0 Stopped Starting Wazuh v4.3.0... Started wazuh-execd... Started wazuh-agentd... Started wazuh-syscheckd... Started wazuh-logcollector... Started wazuh-modulesd... Completed. Fri Oct 15 15:15:50 UTC 2021
----------------------------Captured stderr teardown----------------------------
2021-10-15 08:15:41,451 - wazuh_testing - DEBUG - Trucanted /Library/Ossec/logs/ossec.log 2021/10/15 08:15:41 wazuh-logcollector[2152] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2021/10/15 08:15:41 wazuh-logcollector[2152] main.c:126 at main(): DEBUG: Wazuh home directory: /Library/Ossec 2021/10/15 08:15:41 wazuh-logcollector[2152] agent_op.c:215 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2021/10/15 08:15:41 wazuh-logcollector[2152] agent_op.c:234 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [-] 2021/10/15 08:15:41 wazuh-logcollector[2152] config.c:390 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2021/10/15 08:15:45 rootcheck: INFO: Rootcheck disabled. 2021/10/15 08:15:46 wazuh-logcollector[2270] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2021/10/15 08:15:46 wazuh-logcollector[2270] main.c:126 at main(): DEBUG: Wazuh home directory: /Library/Ossec 2021/10/15 08:15:46 wazuh-logcollector[2270] agent_op.c:215 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2021/10/15 08:15:46 wazuh-logcollector[2270] agent_op.c:234 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [-] 2021/10/15 08:15:46 wazuh-logcollector[2270] config.c:390 at ReadConfig(): DEBUG: agent_config element does not have any attributes.
-----------------------------Captured log teardown------------------------------
DEBUG wazuh_testing:conftest.py:700 Trucanted /Library/Ossec/logs/ossec.log

-----------------------------Captured stderr setup------------------------------
2021-10-15 08:15:50,039 - wazuh_testing - DEBUG - Restarting wazuh-logcollector 2021/10/15 08:15:50 wazuh-logcollector[2304] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2021/10/15 08:15:50 wazuh-logcollector[2304] main.c:126 at main(): DEBUG: Wazuh home directory: /Library/Ossec 2021/10/15 08:15:50 wazuh-logcollector[2304] agent_op.c:215 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2021/10/15 08:15:50 wazuh-logcollector[2304] agent_op.c:234 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [-] 2021/10/15 08:15:50 wazuh-logcollector[2304] config.c:390 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2021-10-15 08:15:50,076 - wazuh_testing - DEBUG - Initializing file to monitor to /Library/Ossec/logs/ossec.log
-------------------------------Captured log setup-------------------------------
DEBUG wazuh_testing:conftest.py:654 Restarting wazuh-logcollector DEBUG wazuh_testing:conftest.py:692 Initializing file to monitor to /Library/Ossec/logs/ossec.log
----------------------------Captured stdout teardown----------------------------
Fri Oct 15 15:15:55 UTC 2021 Killing wazuh-modulesd... Killing wazuh-logcollector... Killing wazuh-syscheckd... Killing wazuh-agentd... Killing wazuh-execd... Wazuh v4.3.0 Stopped Starting Wazuh v4.3.0... Started wazuh-execd... Started wazuh-agentd... Started wazuh-syscheckd... Started wazuh-logcollector... Started wazuh-modulesd... Completed.
----------------------------Captured stderr teardown----------------------------
2021-10-15 08:15:55,659 - wazuh_testing - DEBUG - Trucanted /Library/Ossec/logs/ossec.log 2021-10-15 08:15:55,659 - wazuh_testing - DEBUG - Stopping wazuh-logcollector 2021/10/15 08:15:55 wazuh-logcollector[2326] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2021/10/15 08:15:55 wazuh-logcollector[2326] main.c:126 at main(): DEBUG: Wazuh home directory: /Library/Ossec 2021/10/15 08:15:55 wazuh-logcollector[2326] agent_op.c:215 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2021/10/15 08:15:55 wazuh-logcollector[2326] agent_op.c:234 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [-] 2021/10/15 08:15:55 wazuh-logcollector[2326] config.c:390 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2021/10/15 08:15:55 wazuh-logcollector[2326] main.c:152 at main(): INFO: (1905): No file configured to monitor. 2021/10/15 08:15:55 wazuh-logcollector[2346] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2021/10/15 08:15:55 wazuh-logcollector[2346] main.c:126 at main(): DEBUG: Wazuh home directory: /Library/Ossec 2021/10/15 08:15:55 wazuh-logcollector[2346] agent_op.c:215 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2021/10/15 08:15:55 wazuh-logcollector[2346] agent_op.c:234 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [-] 2021/10/15 08:15:55 wazuh-logcollector[2346] config.c:390 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2021/10/15 08:15:59 rootcheck: INFO: Rootcheck disabled. 2021/10/15 08:16:00 wazuh-logcollector[2455] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2021/10/15 08:16:00 wazuh-logcollector[2455] main.c:126 at main(): DEBUG: Wazuh home directory: /Library/Ossec 2021/10/15 08:16:00 wazuh-logcollector[2455] agent_op.c:215 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2021/10/15 08:16:00 wazuh-logcollector[2455] agent_op.c:234 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [-] 2021/10/15 08:16:00 wazuh-logcollector[2455] config.c:390 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2021/10/15 08:16:00 wazuh-logcollector[2455] main.c:152 at main(): INFO: (1905): No file configured to monitor.
-----------------------------Captured log teardown------------------------------
DEBUG wazuh_testing:conftest.py:700 Trucanted /Library/Ossec/logs/ossec.log DEBUG wazuh_testing:conftest.py:674 Stopping wazuh-logcollector