Troubleshooting errors when adding sensor to DC
23
Troubleshooting TPS Sensor when not receiving events
Use this procedure to take corrective action when the TPS sensor does
not receive events.
1.
Check if the time is set correctly.
2.
Check if snort is running.
3.
Enter the following command to check if the TPS Sensor has attained
100% capacity.
/var
Troubleshooting Defense Center when not receiving events
Use this procedure to take corrective action when the Defense Center
(DC) does not receive events.
1.
Enter the following command to check if the TPS DC has attained
100% capacity.
/var
2.
Check if the TPS sensor(s) is (are) receiving events. Refer section
“Troubleshooting TPS Sensor when not receiving events” (page 23)
for
more information.
3.
Check if the time is synchronized between the DC and sensor(s).
4.
Check if the sensor(s) can reach the DC on ports 8300-8303.
5.
Troubleshoot the SFDataCorrelator. Refer section "Troubleshooting the
SFDataCorrelator", for more information.
Troubleshooting errors when adding sensor to DC
Use this procedure to troubleshoot errors that arise when adding a sensor
to DC.
Procedure 6
Procedure steps
Step
Action
1
Check httpsd_error_log for errors on the DC.
2
Click Reset Comm in the Sensor GUI.
3
SSH to the Sensor. Enter the following command to check for
the IP address of the DC
/var/sf/managed/<DC_IP>
Delete the IP address of the DC, if it exists.
4
Enter the following command to find the size of the
authorized_keys and check if it is the same size as
Nortel TPS 4.7
Threat Protection System Troubleshooting Guide
NN47240-700
01.01
Standard
1
1
2007
Copyright © 2007 Nortel Networks
.
Содержание 2070
Страница 55: ......