Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
You may experience some slow load times, errors, and slight inconsistencies. We ask for your patience as we finalize the launch. Thank you.

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Alarm 997

Hi,

I looked this alarm up on Cisco's Secure encyclopedia http://www.cisco.com/cgi-bin/front.x/csec/idsAllList.pl

for this errorm message but I couldn't find any information on it. Does anyone know what this 997 alarm means?

High Severity Alarms

An Intrusion Attempt has been detected of High Severity. 2003/07/08 13:38:28 997 0 0.0.0.0 0.0.0.0

  • Other Security Subjects
2 REPLIES
Cisco Employee

Re: Alarm 997

Hi,

The signature 997 is a 'route down' indicator and used when it si detected that the IDS services on the sensor have been restarted or stopped completely.

Thanks,

yatin

Cisco Employee

Re: Alarm 997

Others that you might find useful to know;

993 "Missed Packet Count"

994 "Have Traffic"

995 "NO Traffic"

996 "Route Up"

997 "Route Down!"

998 "Daemon Down!"

999 "Daemon Unstartable!"

Thanks,

yatin

132
Views
0
Helpful
2
Replies