topic Re: IDSM troubleshooting in Network Security https://community.cisco.com/t5/network-security/idsm-troubleshooting/m-p/1074506#M79144 <HTML><HEAD></HEAD><BODY><P>Check that the IDSM-2 is getting traffic. On the CLI do a "show interface" </P><P>Check if the traffic is getting to the analysis engine with a "show stat anal"</P><P>(if you're not seeing your taffic in the analysis engine, you forgot to add the interface to the virtual sensor)</P><P>Then turn on sig 2004 (ICMP echo reply) and run a few pings past the sensor to see if you are getting sigs to fire.</P></BODY></HTML> Wed, 13 Aug 2008 16:13:55 GMT rhermes 2008-08-13T16:13:55Z IDSM troubleshooting https://community.cisco.com/t5/network-security/idsm-troubleshooting/m-p/1074505#M79143 <P>How to diagnose whether the IDSM is monitoring traffic. What are the steps.</P> Sun, 10 Mar 2019 11:14:51 GMT https://community.cisco.com/t5/network-security/idsm-troubleshooting/m-p/1074505#M79143 aksher 2019-03-10T11:14:51Z Re: IDSM troubleshooting https://community.cisco.com/t5/network-security/idsm-troubleshooting/m-p/1074506#M79144 <HTML><HEAD></HEAD><BODY><P>Check that the IDSM-2 is getting traffic. On the CLI do a "show interface" </P><P>Check if the traffic is getting to the analysis engine with a "show stat anal"</P><P>(if you're not seeing your taffic in the analysis engine, you forgot to add the interface to the virtual sensor)</P><P>Then turn on sig 2004 (ICMP echo reply) and run a few pings past the sensor to see if you are getting sigs to fire.</P></BODY></HTML> Wed, 13 Aug 2008 16:13:55 GMT https://community.cisco.com/t5/network-security/idsm-troubleshooting/m-p/1074506#M79144 rhermes 2008-08-13T16:13:55Z Re: IDSM troubleshooting https://community.cisco.com/t5/network-security/idsm-troubleshooting/m-p/1074507#M79145 <HTML><HEAD></HEAD><BODY><P>Both the above coands are working fine. How ever I am not geting any alerts on the event viewer.Pls help on this.</P></BODY></HTML> Thu, 14 Aug 2008 02:29:50 GMT https://community.cisco.com/t5/network-security/idsm-troubleshooting/m-p/1074507#M79145 aksher 2008-08-14T02:29:50Z Re: IDSM troubleshooting https://community.cisco.com/t5/network-security/idsm-troubleshooting/m-p/1074508#M79146 <HTML><HEAD></HEAD><BODY><P>Can you post the "show config" of the IDSM and "show run | inc intrusion" of the core switch?</P><P></P><P>Regards</P><P></P><P>Farrukh</P></BODY></HTML> Thu, 14 Aug 2008 07:56:27 GMT https://community.cisco.com/t5/network-security/idsm-troubleshooting/m-p/1074508#M79146 Farrukh Haroon 2008-08-14T07:56:27Z