Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

IDS old entries logs

Hi,

I am trying to check back old packets sniffed on 10,11 May 2006 but I do not know where to go to get the old archive logs.

The reason is, the Firewall on another site detected there are 2 PCs trying to scan the whole range of IP addresses. So I am using IDS to check those source entries,packets..

Need your assistance.

thanks..

1 REPLY
Bronze

Re: IDS old entries logs

If you are using IEV, you use the "Data Source" option to view the old alrams.

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/csids10/idmiev/swchap6.htm#wp604788

You can specify the dates here.

109
Views
0
Helpful
1
Replies