Re: IDS MC problems adding a sensor

8rpalmer · ‎06-25-2003

When trying to add a sensor in the IDS MC (VMS) I get the following error message:

Error

There appears to be a configuration error in the General Signatures settings from the sensor. Please correct the sensor configuration and try again.

What does this mean? IDS MC has S46 loaded as well as the sensor. Have added several other sensors and no problems.

Any help?

ywadhavk · ‎06-25-2003

Is this a 3.x or a 4.x sensor? What version of IDSMC is this?

A 'sho version' or a nrvers (as the case maybe) will help.

Thanks,

yatin

8rpalmer · ‎06-26-2003

the sensors are 3.x sensors and the IDS MC is at version 1.1.

ywadhavk · ‎06-26-2003

Check the /usr/nr/etc/packetd.conf file on the sensor, maybe that is corrupted or bad. Downgrade and reapply the sig, thiss would fix the sig file. Are there any signatures that were modified for severty, destinations etc.?

Thanks,

yatin

8rpalmer · ‎06-26-2003

I copied the packetd.conf file from another "like" sensor and changed the RecordOfInternalAddress and any RecordOfExcludedPatterns that were on the original, FTP'd that out to the sensor, did an nrstop then nrstart, and tried to add it into the IDS MC with the same error.

ywadhavk · ‎06-26-2003

I would apply the latest S47. This will get the sensor to the latest as well as "cure" the doubtful signature file.

thanks,

yatin