cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
340
Views
0
Helpful
2
Replies

Alarm 997

fregon
Level 1
Level 1

Hi,

I looked this alarm up on Cisco's Secure encyclopedia http://www.cisco.com/cgi-bin/front.x/csec/idsAllList.pl

for this errorm message but I couldn't find any information on it. Does anyone know what this 997 alarm means?

High Severity Alarms

An Intrusion Attempt has been detected of High Severity. 2003/07/08 13:38:28 997 0 0.0.0.0 0.0.0.0

2 Replies 2

ywadhavk
Cisco Employee
Cisco Employee

Hi,

The signature 997 is a 'route down' indicator and used when it si detected that the IDS services on the sensor have been restarted or stopped completely.

Thanks,

yatin

Others that you might find useful to know;

993 "Missed Packet Count"

994 "Have Traffic"

995 "NO Traffic"

996 "Route Up"

997 "Route Down!"

998 "Daemon Down!"

999 "Daemon Unstartable!"

Thanks,

yatin