Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I'm using various Cisco routers and switches. Cisco 2811, 1841 routers. Cisco 3560 switches. I'm using net-snmp tools in UNIX.The output below is snipped to show what's important. When I use snmpwalk I see interfaces with errors. When I use the Cisco...
I'm having trouble figuring out how to set up an AT&T OPTEMAN EVC in my home lab.Routers r1, r2, and r3 are connected to r0 by way of the OPTEMAN circuit but they're also connected r1<->r2 and r2<->r3 by the same OPTEMAN circuit. I'm imagining I can ...
I had an issue where EIGRP was choosing to route all traffic over a T1 instead of a 10 Mbit circuit. When I changed the router's ethernet interface connected to the 10 Mbit circuit from Half Duplex to Full Duplex the routes changed to use the 10 Mbit...
This Expect script provides expect with a list of IP addresses to Cisco IPS sensors and commands to configure Cisco IPS sensors.I'm having 2 problems:1. Sometimes the script appears to send the next command before the next prompt appears in which cas...
What does adding Qualys vulnerability scan data to MARS allow MARS, help MARS to do?Does it help MARS identify an alert as a false positive in the context of a host which Qualys says isn't vulnerable OR does it do something else like when the Qualys ...
Interesting.I went back and looked at some historical show interface output and there was almost no traffic on that 10Mbit interface and to my surprise there were 0 collisions, 0 late collisions, and 0 runts.Perhaps your theory occurred at one point ...
Thanks for this suggestion.The connection went from this router, into a cloud, into another router. I didn't know what was in the cloud until today but I did know after looking into it all the other customer interfaces were manually set to full duple...
@mkodaliThanks for your reply. I scrubbed the script of all real user names, passwords, IP addresses, regex, sensor names at prompts, etc.I changed the regex I use to match the naming scheme for the IPS sensors to Foo# because I don't want anyone to ...
I haven't been able to set this up yet. If MARS is able to mark alerts which don't apply to a device as false positives or something like that it could be valuable because it would save the staff time hunting down false positives.
If there's no data and only basic config I'd prefer to install 6 and configure from scratch without exporting/importing any confighttp://www.cisco.com/en/US/docs/security/security_management/cs-mars/6.0/migration/guide/dmigrate6x.htmlhttp://www.cisco...