Ctltranssource - Cisco 4215 - Intrusion Detection Sys Sensor Configuration Manual

Appendix A System Architecture
•
•
NotificationApp provides the following statistics:
•
•
•
•

CtlTransSource

CtlTransSource is an application that forwards locally initiated remote control transactions to their
remote destinations using the RDEP and HTTP protocols. CtlTransSource initiates either TLS or
non-TLS connections and communicates remote control transactions to HTTP servers over these
connections.
CtlTransSource must establish sufficient credentials on the remote HTTP server to execute a remote
control transaction. It establishes its credentials by presenting an identity to the HTTP server on the
remote node in the form of a username and password (basic authentication). When the authentication is
successful, the requestor is assigned a cookie containing a user authentication that must be presented
with each request on that connection.
The transactionHandlerLoop method in the CtlTransSource serves as a proxy for remote control
transaction. When a local application initiates a remote control transaction, IDAPI initially directs the
transaction to CtlTransSource. The transactionHandlerLoop method is a loop that waits on remote
control transactions that are directed to CtlTransSource.
Figure A-2
Figure A-2
+CtlTransSource0
+transaction HandlerLoop
IDAPI
When the transactionHandlerLoop receives a remotely addressed transaction, it tries to forward the
remote control transaction to its remote destination. The transactionHandlerLoop formats the transaction
into an RDEP control transaction message. The transactionHandlerLoop uses the HttpClient classes to
issue the RDEP control transaction request to the HTTP server on the remote node. The remote HTTP
78-16527-01
Memory usage for the system
PEP
Not all IDS and IPS platforms support PEP.
Note
Number of error traps
Number of event action traps
Number of SNMP GET requests
Number of SNMP SET requests
shows the transactionHandlerLoop method in the CtlTransSource.
CtlTransSource
CtlTransSource
HTTP Client
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 5.0
MainApp
A-11