cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
392
Views
0
Helpful
1
Replies

Event time issue - IPS 4240, v5.0, VMS.

ajay_dand
Level 1
Level 1

Hi,

I am having this unique issue. Whereas the IPS system time is correct, and I have set a UTC offset of 330 min (being in the GMT +5.30 hrs time zone.), I am still seeing the event time on the IEV as UTC, and not the system time. This is kinda tedious trying to keep track of the actual local time the event occcurred. The system clock on the IPS shows correct local time.

Also, on the VMS server, the system time is the same as the IPS. However, whenever I open up the SecMon, to view the event, it gives me a funny default start & end time, which is about 3 beyond the system time (I expect the time range reflected in the SecMon, should correspont the system time of the VMS machine, when the SecMon->Monitor->Events link was clicked.) For e.g. if I click on the SecMon->Monitor->Events link at say 10.00 am, on 13th April, I expect the fetch events time range to show from 13-April-2005 10:00:00 hrs to 13-Aril-2005 10:00:00 hrs. However, what it actually displays is 13:00:00 hrs to 13:00:00 hrs. I am at a loss where this time difference is creeping up from. Also, if instead of the time range, I specify, say last 1 or 2 hrs, it wont show me any events. (This I suspect is because of the funny 3 hr time difference that has crept in.) I can only see the events, if I ask the events of beyond last 3 hrs.

Any suggestions how to resolve the same? I am not using any NTP servers currently. Would that help?

Thanks in advance.

Ajay.

1 Reply 1

akhan2004
Level 1
Level 1

Hi Ajay

Its not a major problem either in your CISCO IDS and CISCO VMS. It is time synchronizing factor involved in this mismatch time view on your Sec Mon.

What version of VMS you deployed?

If it is not updated version then download the PERL script Workaround files from Download Center then run on it.

After that, the problem will be resolve.

If it will not resolve then pls reply.

Thanks

Review Cisco Networking for a $25 gift card