24
Software Troubleshooting
authorized_keys.default
/var/sf/snorty/.ssh/authorized_keys
5
If the sizes do not match, enter the following sequence of
commands.
cd /var/sf/snorty/.ssh
rm authorized_keys
authorized_keys.default authorized_keys
6
SSH to the Sensor. Enter the following command to check for
the IP address of the Sensor
/var/sf/managed/<Sensor_IP>
Delete the IP address of the Sensor, if it exists.
--End--
Table 4
Variable Definitions
Variable
Value
<DC_IP>
IP address of the DC
<Sensor_IP>
IP address of the Sensor
Troubleshooting the SFDataCorrelator
Use this procedure to troubleshoot a SFDataCorrelator that is not running.
Procedure 7
Procedure steps
Step
Action
1
Enter the following command to check for error messages.
/var/log/messages
2
Enter the following command to run the initialization script.
/etc/rc.d/init.d/SFDataCorrelator start
3
If the SFDataCorrelator fails to start, repeat step 1 to check for
error messages.
4
If the SFDataCorrelator still fails to start, enter the following
command to delete the event table.
mysql -uroot -padmin sfsnort -e "drop table event"
5
Enter the following command to rerun the initialization script.
Wait for a minute after running the script.
/etc/rc.d/init.d/SFDataCorrelator restart
Nortel TPS 4.7
Threat Protection System Troubleshooting Guide
NN47240-700
01.01
Standard
1
1
2007
Copyright © 2007 Nortel Networks
.
Summary of Contents for 2070
Page 55: ......