IDSM troubleshooting

Unanswered Question
rhermes Wed, 08/13/2008 - 09:13
User Badges:
  • Gold, 750 points or more

Check that the IDSM-2 is getting traffic. On the CLI do a "show interface"

Check if the traffic is getting to the analysis engine with a "show stat anal"

(if you're not seeing your taffic in the analysis engine, you forgot to add the interface to the virtual sensor)

Then turn on sig 2004 (ICMP echo reply) and run a few pings past the sensor to see if you are getting sigs to fire.

Farrukh Haroon Thu, 08/14/2008 - 00:56
User Badges:
  • Red, 2250 points or more

Can you post the "show config" of the IDSM and "show run | inc intrusion" of the core switch?


Regards


Farrukh

Actions

This Discussion