Hi folks,
We are in a really stupid situation. We've been telling our client that MARS is the best in the breed of monitoring products. Now then when the client need to access the archive dated back about half a year for some investigations we are stuck.
This is a low grade MARS device with a configured archiving for the period of 30 days. All other older archives are stored in pnos directory.
I've been reading this guide on "pnrestore" utility
http://www.cisco.com/en/US/docs/security/security_management/cs-mars/6.0/command/reference/cref1.html#wpxref86306
but I'm still confused.
If I want to restore only dynamic data dated back half a year from pnos archive sizing about 700 MB where can they be found? How can I access them and look for an event from a particular network device?
Please advise if possible?
Eugene
