IDS old entries logs

[ahpark78]

Hi,

I am trying to check back old packets sniffed on 10,11 May 2006 but I do not know where to go to get the old archive logs.

The reason is, the Firewall on another site detected there are 2 PCs trying to scan the whole range of IP addresses. So I am using IDS to check those source entries,packets..

Need your assistance.

thanks..

[vkapoor5]

If you are using IEV, you use the "Data Source" option to view the old alrams.

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/csids10/idmiev/swchap6.htm#wp604788

You can specify the dates here.