Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
How do you set up IP logging so that I can drill down more into the alarms? Also is this something that can be done all the time or is it only if i set it up per instance.
You need to enable it per signature. It saves to a file so you can view with Ethereal, sniffer, etc. Don't enable for too many signatures since it can fill the drive on the IDS sensor.
Learn, share, save
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.