I ran the cvtnrlog -d > somefile command on my CSPM box, this exported all the events in the db to somefile.After this I was never able to access the Event Viewer or the reports anymore. Any attempt at opening the Event Viewer causes a crash (DrWatso...

Signatures precedence: assume I want to fire different sigs on CodeRed II (X..X) vs generic .ida overflows. I'd like to do this without having both fire when the more specific one is matched. Any idea?Throttle interval: 1000 seconds maximum seems a b...

My CSPM 2.3.1i has gone awry.Whenever I modify a sensor configuration and update the policy the changes are not saved to the database and they are not sent to the sensor.Looking at the Application Log in the (Window's) Event Viewer, every Update acti...

Hi all.I've just updated one of my sensors to 3.0(1)S4. The update seems to have worked smoothly. See below:The Version of the Sensor is: 3.0(1)S4 postoffice v175 (Release) 01/07/11-21:50 logger v175 (Release) 01/07/...

I've created this string match signature following the suggestion in the eEye analysis of the worm.I'd like the moderators to check if it makes sense, and also tell us if there's an 'official' Cisco sig coming./default.ida?[A-Z][a-z][0-9]+%u9090%u685...