Sensorapp And Alerting; Sensorapp Not Running - Cisco 4215 - Intrusion Detection Sys Sensor Configuration Manual

Troubleshooting the 4200 Series Appliance
Total Bytes Transmitted = 0
Total Multicast Packets Transmitted = 0
Total Broadcast Packets Transmitted = 0
Total Jumbo Packets Transmitted = 0
Total Undersize Packets Transmitted = 0
Total Transmit Errors = 0
Total Transmit FIFO Overruns = 0
MAC statistics from interface GigabitEthernet0/0
Media Type = TX
Link Status = Up
Link Speed = Auto_100
Link Duplex = Auto_Full
Total Packets Received = 1822323
Total Bytes Received = 131098876
Total Multicast Packets Received = 20
Total Receive Errors = 0
Total Receive FIFO Overruns = 0
Total Packets Transmitted = 219260
Total Bytes Transmitted = 103668610
Total Transmit Errors = 0
Total Transmit FIFO Overruns = 0
sensor#
If the output says the command and control interface link status is down, there is a hardware issue or an
IP address conflict.
Make sure the sensor's cabling is correct.
Step 3
Refer to the chapter for your sensor in
Modules
Run the setup command to make sure the IP address is correct.
Step 4
For the procedure, see

SensorApp and Alerting

This section helps you troubleshoot issues with SensorApp and alerting. It contains the following topics:
•
•
•
•
•
•

SensorApp Not Running

The sensing process, SensorApp, should always be running. If it is not, you do not receive any alerts.
SensorApp is part of AnalysisEngine, so you must make sure the AnalysisEngine is running.
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 5.0
C-8
5.0.
Initializing the Sensor, page
SensorApp Not Running, page C-8
Physical Connectivity, SPAN, or VACL Port Issue, page C-10
Unable to See Alerts, page C-11
Sensor Not Seeing Packets, page C-13
Cleaning Up a Corrupted SensorApp Configuration, page C-14
Bad Memory on IDS-4250-XL, page C-15
Installing Cisco Intrusion Prevention System Appliances and
3-2.
Appendix C Troubleshooting
78-16527-01