topic Re: Analysis Engine Not running in Network Security

Analysis Engine Not running

lcuchisanmillan — Sun, 10 Mar 2019 10:10:37 GMT

When i do "sh ver" over an IDS 4250XL 5.1(1)S243.0 it appears:

...

AnalysisEngine 2006_Feb_08_13.09 (Release) 2006-02-08T13:52:38-0600 NotRunning

...

What does it imply? How can i start it?

Thanks,

Re: Analysis Engine Not running

sean.martin — Mon, 21 Aug 2006 15:18:01 GMT

If the ananlysis engine is not running, your sensor is not analyzing dumped traffic (and is therefore useless).... To get it started, follow the steps below.

1. Create a service account user in CLI or IDM

2. Login using service account in CLI

3. Switch to root user by typing su and service account pwd

4. Type the following command at bash-2.05b# prompt: /etc/init.d/cids restart

5. To check if the sensor is "up" again, type su cisco. Then do a show version.

6. If you still experience issues, exit back to the service account and type reboot.

If the helps, please rate me..

Cheers,

Jay Walker

Re: Analysis Engine Not running

lcuchisanmillan — Tue, 22 Aug 2006 09:56:16 GMT

Thank you. It works with an IDS 4250, but with an IDS 4250XL is stopped again almost inmediately (what i do not understand.

Re: Analysis Engine Not running

mcampigl — Tue, 22 Aug 2006 19:56:08 GMT

Were you upgrading to 5.1? Check if you have a license. We also have seen this behavior with AEs with a very diferent date than the other two services. Unfortunatelly we have reimaged those sensors to recover them.