New to IDS

[s-ariga]

Hi,

I am new to IDS .

Have installed a IDS 4230 netranger to my network .one port is management port .and 1 on promiscous mode which is connected to a switch(3512).I have the IDS director software installed on HP machine.I think i have installed the director and the sensor software right .IDS ,also packetd,loogerd..etc are visible in the nnm screen at the ids director .

I am unable to see any logs though.not even a single activity going on.

Should the port in the 3512 switch be configured to any particular mode or am I missing anything else...please guide.

Thanks

shiva

[danrodri]

The switch port needs to be designated as the "SPAN/monitor" port. SPAN the traffic you want analyzed to this port. The IDS monitoring port will not see any traffic otherwise.