TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems! ----------------------------------------------------------------------------
Have you verified the TCP ports listening using "netstat -a" on the Solaris machines? Are there any other connectivity issues to these solaris boxes? If so or not sure, perhaps issue "ifconfig -a" and verify the MTU for the appropriate interface(s). Also check the contents of /var/adm/messages to see if there are any errors about MasterStatusManager or crypto policy. -----Original Message----- From: Laurent Cabal [mailto:[EMAIL PROTECTED]] Sent: Monday, March 25, 2002 8:45 AM To: '[EMAIL PROTECTED]'; [EMAIL PROTECTED] Subject: RE : network sensor down TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems! ---------------------------------------------------------------------------- Hi, I have exactly the same problem but my network sensors and my console are on windows NT 4.0 SP6a and they are running 6.5 version. Thanks by advance for any information. ---------------------------------------------------------------------------- ------------ Laurent Cabal Ing�nieur S�curit� ALTHES "L'expertise s�curit�" 53 rue Albert Samain 59650 Villeneuve d'Ascq tel: 33 (0) 3.20.33.84.40 fax: 33 (0) 3.20.33.84.31 http://www.althes.fr -----Message d'origine----- De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Envoy� : lundi 25 mars 2002 10:01 � : [EMAIL PROTECTED] Cc : [EMAIL PROTECTED] Objet : network sensor down TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems! ---------------------------------------------------------------------------- Hi, I have a console to monitor 5 network sensors. All of them are running 6.5 version. The console is Win 2000 Prof., sensors are Solaris 2.7. When I open the console, I saw the sensor's status is active and connected. However, if I tried to telnet the sensor's port 901, no response. I then telnet to the senosr, I tried to grep the processes. I found there were abnormal no. of processes up. Pls see below screen dump: ----------------------- ps -ef|grep iss root 28513 1 0 Mar 14 ? 0:57 issDaemon -d /opt/ISS/issDaemon root 29894 28513 0 Mar 22 ? 6:48 /opt/ISS/issSensors/idshkhm/issCS F -d /opt/ISS/issSensors/idshkhm/ -c /opt/ISS/ root 29186 1 0 Mar 18 ? 0:00 /opt/ISS/issSensors/idshkhm/issCS F -d /opt/ISS/issSensors/idshkhm/ -c /opt/ISS/ root 28810 1 99 Mar 15 ? 14684:23 /opt/ISS/issSensors/idshkhm/is sCSF -d /opt/ISS/issSensors/idshkhm/ -c /opt/ISS/ # telnet 0 901 Trying 0.0.0.0... Connected to 0. Escape character is '^]'. ----------------------- /var/adm/messages: Mar 24 12:21:44 idshkhm xntpd[27023]: time reset (step) -0.130030 s Mar 25 10:08:24 idshkhm xntpd[27023]: time reset (step) -0.130298 s Mar 25 15:21:32 idshkhm ISS[472]: (idshkhm) - OnError from 10.47.1.80: Data coul d not be received because the header indicates that it is too large [ID=0xc7200 010] Mar 25 15:22:03 idshkhm issDaemon[471]: Error [0xc7200010], On connection 10.47. 1.80. Data could not be received because the header indicates that it is too lar ge [ID=0xc7200010] ----------------------- I checked the enterprise database was not full. Any idea? ---------------------------------------------- �w��ϥ�HongKong.com�l��t�� Thank you for using hongkong.com Email system *---------------------------------------------------------------* * Cet e-mail et toutes les pi�ces jointes sont destin�s aux * * seules personnes auxquelles ils sont sp�cifiquement adress�s * * et n'engagent que le signataire de ces documents et non la * * structure dont il d�pend. * * Leur existence et leur contenu ont un caract�re confidentiel. * * Toute utilisation ou diffusion non autoris�e est interdite. * * Si vous avez re�u cet e-mail ou si vous d�tenez sans en �tre * * le destinataire, nous vous demandons de bien vouloir nous en * * informer imm�diatement. * * Cette note assure que ce message a �t� contr�l� et ne * * comprenait aucun virus connu � ce jour, n�anmoins tout * * message �lectronique est susceptible d'alt�ration. * * Nous d�clinons toute responsabilit� au titre de ce message * * s'il a �t� alt�r�, d�form� ou falsifi�. * *---------------------------------------------------------------*
