We have cisco IDS(netranger) running on sol 2.8. I want to know why the interface that is capturing packets does not show when I do ifconfig -a on the terminal session on the server. Is there a way to see the packets the IDS is capturing using snoop
In solpc-2.8, only plumbed interfaces appear in the output of the "ifconfig -a" command. You can snoop unplumbed interfaces with the "snoop -d (iface)" command. The trick is knowing the name of the interface.
One way is to guess, based on the platform. IDS-4220 and IDS-4230-FE sensors sniff on the "spwr0" interface. IDS-4210 sensors use "iprb0". I cannot say for sure what you'll see on IDS-4235 and IDS-4250; however, I think it is also "iprb0".
One way to find out without guessing is to examine the devices on the various system busses. Solpc-2.8 allows you to do this by issuing the following command (as root):
# find /devices -name '*spwr*' -o -name '*iprb*'
Here is example output (from an IDS-4210):
This indicates that there are two Intel NICs in this system: iprb0 and iprb1. Try snooping on all the unplumbed interfaces (the ones that do _not_ appear in the "ifconfig -a" output).
DocumentationCode download linksGoalRequirementLimitationsSupported ISR and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and UCS-E Blades:Step by Step ConfigurationConfigure one of the connectivity options to access the Cisco IMC from the n...
Firepower Threat Defense (NGFWv) on UCS E-series - Transparent Mode in HA
DocumentationCode download linksGoalRequirementLimitationsSupported ISR and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and UCS-E Blades:Step by Step ConfigurationCo...
I am currently unable to specify "crypto keyring" command when configuring VPN connection on my cisco 2901 router.
The following licenses have been activated on my router :