[ISSForum] RealSecure Network Sensor 7.0 - SiteProtector 2.0 SP2.1 - EC monitoring

[Olivier Lejeune]

I would like to monitor the communication between the sensor et the 
event collecor. I configure my sensor to send snmp trap on error alert. 
I applied to it a response where I defined my snmp manager.

when i shutdown my EC, I have the following error in the system log of 
my sensor :

Oct 23 14:55:32 Bt1sni01 [LOG_ERR] ISS[4176]: (network_sensor_1) - 
OnError from
172.29.178.131: The session has been closed by the peer.
[ID=0x47200401]
Oct 23 14:55:32 Bt1sni01 [LOG_ERR] ISS[4849]: (network_sensor_2) -
OnError from
172.29.178.131: The session has been closed by the peer.
[ID=0x47200401]

I thought a trap would have been sent by the sensor to my snmp manager. 
I sniff the traffic from my sensor but it seems that no trap was sent.

My sensor is running on a nokia and I use siteprotector 2.0 sp2.1 to 
monitor it.

Is it normal?
Does anybody already succeed to receive some alerts from a realecure 
network sensor 7.0 when the communication with the EC failed.

Thanks

--
Lejeune Olivier
Security Consultant
Ubizen Luxembourg - Rue Robert Stumper 18 - 2557 Luxembourg
Phone   +352 26 31 05 85
Fax     +352 26 31 05 86
http://www.ubizen.com   
_______________________________________________
ISSForum mailing list
[EMAIL PROTECTED]
TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo