error communication between sensor and ids event viewer

[ywang]

Here is nrconns result. I tried reinstall a couple of times and the troubleshooting guids in "Cisco Intrusion Detection System Getting Started Version 3.1".

Yi

>nrconns

Connection Status for sensor1.Fq

console2.Fq Connection 1: 192.168.1.6 45000 1 [SynSent]

sto:5000 syn NOT rcvd!

[jlin1]

Did you add that sensor into IDS Event Viewer's device list? If so, please double check the postoffice settings in Event Viewer and sensor. They should exactly match.

Besides, go to Windows control panel->services, check if CSIDS DataFeed and Cisco IDS Event Viewer services are running. If not, you can click Cisco IDS Event Viewer service to start and it will then also start DataFeed service.

[ywang]

worked after adding the device into event viewer's device list. thanks.