Other Security Subjects

I try to read and inteprete the logs from my IDS 4230. What do I need to do? I've tried winzip, ethereal and all they see are garbage. Is there any way to automate or convert all the logs into some kind of readable and inteligent format? Thanks,Jam...

Hi allAfter upgrading sensor signature version to 20 when ichoose view=>sensor events=>database i getNrldNameManager::insertSig,ID already exists messageWhen i click ok it works without problem but what is that message?Any info will be will be apprec...

How do I track or audit which hosts/nets are being shunned?

Does anyone knows where i get a script which can push the log files from the Director to the oracle database automatically?,because currently i running them manually.please haelp...

I downloaded a recent version of CSPM_v23i_IDS.exe but during the installation, it error out with a "licensed expired" message. Anyone know where I can obtain a newer license.dsk file?

hi:anybody know if there's a difference in the number of concurrent sessions supported by the following bundles? PIX-525-R-BUNPIX-525-UR-BUNgracias.c.

I've installed the eval. version (2.0.1) of the HIDS on a w2k server running on IIS, it is now on protecting-mode. When users logon to the server, it takes over a minute for the login to finish, also noticed pages take longer to display. Not sure if ...

Hi all!I have a PIX terminating VPN Client connections. These connections work fine. Now I'm trying to end a lan-to-lan tunnel from a concentrator to the PIX. The tunnel can be opened from both ends, but data can only be sent from the concentrator to...

Currentlly, most of informations regarding 802.1X arefocusing on WLAN. But it should also work onWired LAN. Cisco Catalyst 2950G &3550G are supporting 802.1X.Does anyone know that any Ethernet NIC, driver orsoftware available for non WLAN environemnt...

I am using Cisco VPN 3030 Concentrator, and various Client OS. (Win 95-XP)After reading several posts here, it seems that decreasing the client MTU might fix a lot of my issues with connectivity. I seem to remember, that in older versions of the cli...

Description: The Signature triggers when a filename greater than 300 characters is seen in a URL with .pl extension. Got the alert on URL like: http://www.example.com/scr.pl&a=1&b=2&c=3&...Looks like it doesn't check the filename but checks total UR...

Is there any way to create your own tags for network and/or hostgroups?E.g.I create rules now and filter based on the "IN" tag -- and the "IN" tag is comprised of hosts or networks identified by RecordOfInternalAddress -- is there a way to create my ...

Hi, I have an IDSM that due to the fact it occasionally stops monitoring traffic, I have to telnet to the IDSM and reboot it. After doing this today, the Cat 6509 stops passing traffic and reports that the Multilayer Switch Feature module and the 10...

I thought that the 192.x.x.x ip addresses were supposed to be non-routable on the internet? I get a ton of UDP Packet sig 4000 sub sig 69 from source addresses of 192.x.x.x. They actually just started today. Does anyone know the answer to the 1st ...

I configured the sensor( sensor.netsoft) to send the errors, commands, events, ... to the smid daemon in the director (ids.NETSOFT), but all of the events are displayed in the alarm-submap of the sensor although the event logfile in the director has...