Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

CSPM 2.3.3i can not generate reports

I have and IDS 4210 and a CSPM 2.3i configured. In the event viewer of the CSPM I can only see information of route status up or down but I can not get any reports of activity (most active users, most active web site, etc).

I have already test the "nrstatus", "snoop -d iprb0", "nrconns" and everything seems to be fine.

My configuration is through a PIX 515. Is there something special I have to do to get these reports ?.

Thank you in advance.

New Member

Re: CSPM 2.3.3i can not generate reports

You can see the traffic at the sensor but no alarms via the event viewer? Is that right? If so, there is a box where you enter the interface that is doing the snooping. I think it is in the sensor area of CSPM, says something like /dev/spwra or something (sorry, moved on to IDS MC) but I had the same issue with the 4235. Make sure it is watching the correct interface on the sensor for traffic.

New Member

Re: CSPM 2.3.3i can not generate reports

I found that the sensor was monitoring the other interface and I already fix it.

I didn´t know that the user activity reports and web reports were exclusively for the syslog messages coming from the routers or firewalls, so this is not an issue and I should use CSPM 3.0 to get these kind of reports.

I was wondering why you have to use another box to get these reports. If you have some alternatives please let me know.

Thank you.