Cisco Systems IPS 7.1 Home Security System User Manual


  Open as PDF
of 1042
 
C-31
Cisco Intrusion Prevention System CLI Sensor Configuration Guide for IPS 7.1
OL-19892-01
Appendix C Troubleshooting
Troubleshooting the Appliance
The SensorApp and Alerting
This section helps you troubleshoot issues with the SensorApp and alerting. It contains the following
topics:
The SensorApp is Not Running, page C-31
Physical Connectivity, SPAN, or VACL Port Issue, page C-32
Unable to See Alerts, page C-34
Sensor Not Seeing Packets, page C-35
Cleaning Up a Corrupted SensorApp Configuration, page C-37
The SensorApp is Not Running
The sensing process, SensorApp, should always be running. If it is not, you do not receive any alerts.
The SensorApp is part of the Analysis Engine, so you must make sure the Analysis Engine is running.
To make sure the Analysis Engine is running, follow these steps:
Step 1 Log in to the CLI.
Step 2 Determine the status of the Analysis Engine service and whether you have the latest software updates.
sensor# show version
Application Partition:
Cisco Intrusion Prevention System, Version 7.1(3)E4
Host:
Realm Keys key1.0
Signature Definition:
Signature Update S605.0 2011-10-25
OS Version: 2.6.29.1
Platform: ASA5585-SSP-IPS10
Serial Number: 123456789AB
No license present
Sensor up-time is 13 days.
Using 4395M out of 5839M bytes of available memory (75% usage)
system is using 26.2M out of 160.0M bytes of available disk space (16% usage)
application-data is using 69.7M out of 171.6M bytes of available disk space (43%
usage)
boot is using 57.3M out of 70.5M bytes of available disk space (86% usage)
application-log is using 494.0M out of 513.0M bytes of available disk space (96%
usage)
MainApp S-2011_NOV_16_00_20_7_1_3_46 (Release) 2011-11-16T00:23:0
6-0600 Running
AnalysisEngine S-2011_NOV_16_00_20_7_1_3_46 (Release) 2011-11-16T00:23:0
6-0600 Running
CollaborationApp S-2011_NOV_16_00_20_7_1_3_46 (Release) 2011-11-16T00:23:0
6-0600 Running
CLI S-2011_NOV_16_00_20_7_1_3_46 (Release) 2011-11-16T00:23:0
6-0600
Upgrade History:
IPS-K9-7.1-3-E4 00:30:07 UTC Wed Nov 16 2011