Can help me start IDS two demon ?

[jhlin]

Hi,

I find my 4210 (ids) have two demon missing. I have no unix background , could you tell me how to start them. I find packetD and manageD missing.

It is my first time learned from class. So, could you tell me more information abour IDS. Thanks very much

Have a nice new year

[vanandan]

Hi,

You can try the following,

Check the whether the file "daemons" under /usr/nr/etc/ directory has the following entries,

nr.packetd

nr.managed

If not, add the entries to the file and stop and start the daemons from the command line.

You have to execute this commands as a netranger user.

If you are using sensors of versions prior to 3.0, make sure that the file packetd.conf under /usr/nr/etc/ directory has the following entry,

NameOfPacketDevice /dev/spwr0

Otherwise, add the entry to the packetd.conf and restart the daemons.

If you are managing the device using CSPM / Unix Director(Netranger) you can do the same using the configuration utiltiy provided in the CSPM/Unix Director.

To know more about the IDS Sensors and Unix Director/CSPM check out the following links.

http://www.cisco.com/univercd/cc/td/doc/product/ismg/policy/ver23i/idsguide/index.htm

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/

-Vinoth.

[kleem]

After running booting the Sensor, logging in as root and running sysconfig-sensor, the Sensor is ready to communicate with a management application (either the UNIX Director or CSPM). The packetd and managed daemons are not turned on by default, but are enabled when configured by the management application.

So, to enable the packetd and managed, run the "New Sensor Wizard" on the management application and configure the Sensor's sensing and device management functions.