04-13-2005 09:28 AM - edited 03-10-2019 01:23 AM
Hi,
I am having this unique issue. Whereas the IPS system time is correct, and I have set a UTC offset of 330 min (being in the GMT +5.30 hrs time zone.), I am still seeing the event time on the IEV as UTC, and not the system time. This is kinda tedious trying to keep track of the actual local time the event occcurred. The system clock on the IPS shows correct local time.
Also, on the VMS server, the system time is the same as the IPS. However, whenever I open up the SecMon, to view the event, it gives me a funny default start & end time, which is about 3 beyond the system time (I expect the time range reflected in the SecMon, should correspont the system time of the VMS machine, when the SecMon->Monitor->Events link was clicked.) For e.g. if I click on the SecMon->Monitor->Events link at say 10.00 am, on 13th April, I expect the fetch events time range to show from 13-April-2005 10:00:00 hrs to 13-Aril-2005 10:00:00 hrs. However, what it actually displays is 13:00:00 hrs to 13:00:00 hrs. I am at a loss where this time difference is creeping up from. Also, if instead of the time range, I specify, say last 1 or 2 hrs, it wont show me any events. (This I suspect is because of the funny 3 hr time difference that has crept in.) I can only see the events, if I ask the events of beyond last 3 hrs.
Any suggestions how to resolve the same? I am not using any NTP servers currently. Would that help?
Thanks in advance.
Ajay.
04-14-2005 01:41 AM
Hi Ajay
Its not a major problem either in your CISCO IDS and CISCO VMS. It is time synchronizing factor involved in this mismatch time view on your Sec Mon.
What version of VMS you deployed?
If it is not updated version then download the PERL script Workaround files from Download Center then run on it.
After that, the problem will be resolve.
If it will not resolve then pls reply.
Thanks
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide