topic Re: VMS SEC MON in Network Security https://community.cisco.com/t5/network-security/vms-sec-mon/m-p/408155#M100230 <HTML><HEAD></HEAD><BODY><P>what sensor version are you running? the only difference on the alert should be resetTcpFlowSent: true, the sensing interface on the idsm2 remain ge7 and ge8. I'd like to see the entire alert from the cle... show ev al</P></BODY></HTML> Wed, 09 Nov 2005 22:58:57 GMT ibanezm 2005-11-09T22:58:57Z VMS SEC MON https://community.cisco.com/t5/network-security/vms-sec-mon/m-p/408154#M100217 <P>Question on VMS 2.3 in the SEC MON(sensor is a IDSM2) events I have notice that on one of my sensors the following Alert Detail: Traffic Source int0(other details show int7 as my source):, is this the TCPRESET port? if so I do not have that SIG set to do this. the SID ID=1203 GFRag Overwrite.</P><P></P><P>Thanks</P> Sun, 10 Mar 2019 09:44:50 GMT https://community.cisco.com/t5/network-security/vms-sec-mon/m-p/408154#M100217 jlwomeld 2019-03-10T09:44:50Z Re: VMS SEC MON https://community.cisco.com/t5/network-security/vms-sec-mon/m-p/408155#M100230 <HTML><HEAD></HEAD><BODY><P>what sensor version are you running? the only difference on the alert should be resetTcpFlowSent: true, the sensing interface on the idsm2 remain ge7 and ge8. I'd like to see the entire alert from the cle... show ev al</P></BODY></HTML> Wed, 09 Nov 2005 22:58:57 GMT https://community.cisco.com/t5/network-security/vms-sec-mon/m-p/408155#M100230 ibanezm 2005-11-09T22:58:57Z Re: VMS SEC MON https://community.cisco.com/t5/network-security/vms-sec-mon/m-p/408156#M100237 <HTML><HEAD></HEAD><BODY><P>Version 4.1(5)S201</P><P></P><P>Sig Name Sensor Name Alert Details Local Date</P><P>CARL322IDSINDIA Frag Overwrite Traffic Source: int0 ; Wed, Nov 09, 2005 02:46:00 PM</P><P></P><P>here is my config for my SPAN</P><P>monitor session 10 source interface Gi1/1 - 2 rx</P><P>monitor session 10 source interface Gi2/1 rx</P><P>monitor session 10 destination intrusion-detection-module 8 data-port 1</P></BODY></HTML> Thu, 10 Nov 2005 15:24:44 GMT https://community.cisco.com/t5/network-security/vms-sec-mon/m-p/408156#M100237 jlwomeld 2005-11-10T15:24:44Z