IPS 5.1 problem

gabrieleferrari — Sun, 10 Mar 2019 10:52:53 GMT

The sensor stop to generate events and on the integrated Event Viewer there are the following errors:

evError: eventId=1192011031367351204 vendor=Cisco severity=warning

originator:

hostId: sensor-1

appName: cidwebserver

appInstanceId: 416

time: 27 ottobre 2007 8.37.14 UTC offset=120 timeZone=GMT+01:00

errorMessage: while sending a TLS warning alert close_notify, the following error occurred: socket error [3,32] name=errTransport

evError: eventId=1192011031367351229 vendor=Cisco severity=warning

originator:

hostId: sensor-1

appName: cidwebserver

appInstanceId: 431

time: 8 novembre 2007 8.59.31 UTC offset=60 timeZone=GMT+01:00

errorMessage: while sending a TLS warning alert close_notify, the following error occurred: socket error [3,32] name=errTransport

evError: eventId=1192017851367351014 vendor=Cisco severity=warning

originator:

hostId: sensor-1

appName: sensorApp

appInstanceId: 344

time: 22 novembre 2007 10.52.41 UTC offset=60 timeZone=GMT+01:00

errorMessage: Warning Table Size Limit Exceeded name=errUnclassified

I havent find on cisco.com the explanation of those messages..

Anyone can indicate me where cain I find it on CCO?

Anyone has an idea about the problem that generate those errors?

Thanks in advance

Regards

Re: IPS 5.1 problem

rhermes — Fri, 23 Nov 2007 15:25:05 GMT

The errors you posted span almost a month of time. I wouldn't worry about two TLS errors over several weeks.

Is your CIDS process running (sh ver)?

Have you restarted your sensor?

Are you receiving traffic at the sensing interface?

Is the sensor running the latest 5.1 Service Pack?