Alarm 997

[fregon]

Hi,

I looked this alarm up on Cisco's Secure encyclopedia http://www.cisco.com/cgi-bin/front.x/csec/idsAllList.pl

for this errorm message but I couldn't find any information on it. Does anyone know what this 997 alarm means?

High Severity Alarms

An Intrusion Attempt has been detected of High Severity. 2003/07/08 13:38:28 997 0 0.0.0.0 0.0.0.0

[ywadhavk]

Hi,

The signature 997 is a 'route down' indicator and used when it si detected that the IDS services on the sensor have been restarted or stopped completely.

Thanks,

yatin

[ywadhavk]

Others that you might find useful to know;

993 "Missed Packet Count"

994 "Have Traffic"

995 "NO Traffic"

996 "Route Up"

997 "Route Down!"

998 "Daemon Down!"

999 "Daemon Unstartable!"

Thanks,

yatin