AIP-SSM How to Verify Traffic is being passed for inspection?

"show conf" command on my AIP SSM CLI. gigabitEthernet0/1 backplane interface of the SSM has not been assigned to virtual sensor vs0.but
Through this command show service-policy
traffic is recevied by IPS Module.why this,
Kindly guide me

Thanks,i got it.
Cinet-IPS1# show statistics virtual-sensor
Virtual Sensor Statistics
Statistics for Virtual Sensor vs0
Name of current Signature-Defintion instance = sig0
Name of current Event-Action-Rules instance = rules0
List of interfaces monitored by this virtual sensor = GigabitEthernet0/1 subinterface 0
General Statistics for this Virtual Sensor
Number of seconds since a reset of the statistics = 434653
SensorApp Memory Use Percentage = 33
Processing Load Percentage = 1
Total packets processed since reset = 1722
Total IP packets processed since reset = 1722
Total IPv4 packets processed since reset = 1722
Total IPv6 packets processed since reset = 0
Total IPv6 AH packets processed since reset = 0
Total IPv6 ESP packets processed since reset = 0
Total IPv6 Fragment packets processed since reset = 0
Total IPv6 Routing Header packets processed since reset = 0
Total IPv6 ICMP packets processed since reset = 0
Total packets that were not IP processed since reset = 0
Total TCP packets processed since reset = 1466
Total UDP packets processed since reset = 0
Total ICMP packets processed since reset = 256
Total packets that were not TCP, UDP, or ICMP processed since reset = 0
Total ARP packets processed since reset = 0

Similar Messages

HT5631 How do I turn off being asked for my password EVERY time I want to download an app?

How do I turn off being asked for my password EVERY time I download an App on the app store? When I go to the security page on "Manage my Apple ID" it only has a link to set-up two step verification...not disable it.

You can't.

How to verify the user information pass by the form with a stored procedure?

Hi,
I would like to know how to verify user information pass by the form with a stored procedure.
I want make a portal which accepts to new user registration, but I want verify the new user's informations (like the name don't contain a number etc).
Thanks for your help
regards
jla

Hi Samson,
You can use the UI API to do this. You can catch the form_ADD event and then validate the input from the users. You can even block the event from completing (and stop the document from being added) if your code finds some incorrect data using the bubbleEvent functionality.
I don't have one specific example to show you, but if you look at some of the SDK samples (for example C:\Program Files\SAP\SAP Business One SDK\Samples\COM UI\VB.NET\02.CatchingEvents) to see how to work with events, you can then create your own validation to ensure the users data is valid.
Regards,
Niall

How to assure index is being used for Query

Hi All,
Indexed are best way to speedup the data retrieval process selectively.
however i wanted to how to trace that weather index is being used in a particular query.
1. Table tab1 has composite index on a and b.
2. Select a,b,c from tab1 where a>500 ;
Will this query use index create from 1 ?
Conceptually it should not because where as part contains only field A where as index is composit on field A and B.
However , i wanted to know to trace that a perticual query is using index or not ?
This question was asked to me in an interview.
Pls le me know at [email protected]
Thanks in Advance
Alok

Hi,
Use explain plan to know if index is use.
As you can see in the following example, even if index is composed and I use only a part in query, index can be used :
SQL> create table test (col1 number, col2 number, col3 varchar2(10));
Table created.
SQL> insert into test select object_id, data_object_id, substr(object_name,1,10) from dba_objects;
70211 rows created.
SQL> create index idx on test(col1,col2);
Index created.
SQL> explain plan for
2 select col1,col2,col3 from test where col1 > 500;
Explained.
SQL> @$ORACLE_HOME/rdbms/admin/utlxpls
PLAN_TABLE_OUTPUT
| Id | Operation                   | Name       | Rows | Bytes | Cost |
|   0 | SELECT STATEMENT            |             |       |       |       |
|   1 | TABLE ACCESS BY INDEX ROWID| TEST        |       |       |       |
|* 2 |   INDEX RANGE SCAN          | IDX         |       |       |       |
Predicate Information (identified by operation id):
PLAN_TABLE_OUTPUT
   2 - access("TEST"."COL1">500)
       filter("TEST"."COL1">500)
Note: rule based optimization
16 rows selected.
--If stats are collected, index is no more used
SQL> analyze table test compute statistics;
SQL> explain plan for
2 select col1,col2,col3 from test where col1 > 500;
Explained.
SQL> @$ORACLE_HOME/rdbms/admin/utlxpls
PLAN_TABLE_OUTPUT
| Id | Operation            | Name       | Rows | Bytes | Cost |
|   0 | SELECT STATEMENT     |             | 69808 | 1227K|    16 |
|* 1 | TABLE ACCESS FULL   | TEST        | 69808 | 1227K|    16 |
Predicate Information (identified by operation id):
PLAN_TABLE_OUTPUT
   1 - filter("TEST"."COL1">500)
Note: cpu costing is off
14 rows selected.
--But if you use an equlity in your query instead of >, index is still used
SQL> explain plan for
2 select col1,col2,col3 from test where col1 = 500;
Explained.
SQL> @$ORACLE_HOME/rdbms/admin/utlxpls
PLAN_TABLE_OUTPUT
| Id | Operation                   | Name       | Rows | Bytes | Cost |
|   0 | SELECT STATEMENT            |             |     1 |    18 |     3 |
|   1 | TABLE ACCESS BY INDEX ROWID| TEST        |     1 |    18 |     3 |
|* 2 |   INDEX RANGE SCAN          | IDX         |     1 |       |     2 |
Predicate Information (identified by operation id):
PLAN_TABLE_OUTPUT
   2 - access("TEST"."COL1"=500)
Note: cpu costing is off
15 rows selected.
SQL> Nicolas.

I just accidentally made a double purchase on an audiobook. I downloaded the first one and have the second repeat download on hold. How do I keep from being charged for this extra book I don't need?

I accidentally made a double purchase on an audiobook. I am not sure what I did wrong but now I have one of the books downloaded and an identical purchase on hold to download...I don't want to pay for this book twice! How do I stop the download or how do I get this adjusted? When I looked in my purchases the book is there twice.

Please pardon the intrusion…
Hi, Diavonex!
Congratulations on advancing to Level 6!
At the Water Cooler in the Level 6+ Lounge, we are throwing virtual confetti in celebration of your attainment of Level 6-dom. Would you care to join us at the Water Cooler?
Towards the bottom of the index on the Apple Support Communities Home Page you soon will find the Lounge link available to you. It should work for you within the next 24 hours if all goes as it should.
Hope to see you there soon!

Folks, How do you stop tftp being tried for Config collection ?

Hi there. We use LMS 3.2 with RME 4.3.1.[Solaris 10].
tftp is band across our network. So we don't use tftp remotely.
I've removed tftp from the RME config transport settings. [I just allow SSH / SCP ]
We still get 'couldnot determine the tftpboot directory. VLAN Config fetch is not supported using SCP'.
How can config RME to not even attempt to use tftp when pulling back switch configs ?
We don't want the old vlan.dat database form our older switches. Config collection also tries to tftp to routers to pull back the VLAN config.
Please have a think ? Many thanks. Guy

So it still tries anyway?
Well, if you use SSHand RCP/SCP you could try to disable the TFTPserver of ciscoworks.
It is a regular windows service (on the windows version of LMS ofcourse) just stop and disable it.
Archive will fail because it can't get vlan.dat ofcourse but that is how RME is hardcoded
Cheers,
Michel

How I can change ( or install ) pass for entrance to my PC ?

I want to install passwords for entrance to my Mazilla Firefox and MozillaThunderbird. How I can do this ?

Best way is to password protect your Windows user account. <br />
http://www.microsoft.com/windowsxp/using/setup/winxp/accounts.mspx
Sorry, neither Firefox or Thunderbird have that type of password protection. There's an extension available to add it to both, but it is easily by passed. And is not available from the official Mozilla Add-ons website

How to Verify Db logs and backups

1) How to check that Oracle Database logs are being archived or cleaned up on a regular basis in Solaris
2) How to Verify backups are being performed in solaris

844081 wrote:
EdStevens wrote:
844081 wrote:
1) How to check that Oracle Database logs are being archived or cleaned up on a regular basis in Solaris
2) How to Verify backups are being performed in solarisIf you are talking about oracle backups and logs, it is OS independent. Look at the various options of the LIST command in rman. In addition, have your rman backup jobs write a log that you can examine.Can you be clear about what you are saying.. just letme know about the steps to be followed... :)Step 1 - point your browser to tahiti.oracle.com. This is the portal to the complete oracle doc set
Step 2 - drill down to your product and version. Here you will find the complete doc set for said product/version
Step 3 - locate the backup and recovery reference
Step 4 - Find the LIST command
Step 5 - read what each option of LIST can show you.

IPS Labs using AIP SSM 10

Hi,
Can anybody send me a lab with a scenario for IPS using AIP SSM 10 and and if they could be for both CLI as well as by using ASDM. Also, when I was trying to access IPS using ASDM, I was getting an error message "Error connecting to sensor. Failed to load sensor-Error getting config data from following modules analysisEngine signatureDefinition networkAccess host". Can anybody please give me a solution for it.
Thanks.

Cisco had orginally planned to add a "keep alive" signature to 6.0. but that feature got dropped. The intent was to fire off a signature every few mins as long as the sensor was seeing valid traffic. The absence of seeing this signature should trigger some attention to a downed sensor.
You can write a custom sig, but you have to be able to detect the loss of that event to be of value.

How to verify my account using my yahoo email? and how to open my apple id in what mail in iphone 4?

how to verify my account using my yahoo email? and how to open my apple id in what mail in iphone 4?

Hi stanlaw,
Welcome to the Support Communities!
The information below should help you with this.
Associating and verifying email addresses with your Apple ID
http://support.apple.com/kb/HE68
How to verify the primary email address for your Apple ID
When you first create an Apple ID (using your email address) a verification email will be sent to that address. If you sign in to your Apple ID from the link in that email, the email address will be verified as the primary email address for your Apple ID. You can also resend the email verification if the email address is not verified:
1. Sign in to My Apple ID to manage your account information.
2. Click Resend under Primary Email Address.
3. Verify your changes by following the link in the email you will receive from Apple and signing back in to your account.
I hope this information helps ....
Happy Holidays!
- Judy

How do i see which parameters are being passed to wwv_flow.accept?

Greetings everyone,
After submiting a page i get this error:
"The requested URL /pls/apex/wwv_flow.accept was not found on this server."
I placed some inserts inside my page process to check and i found out the process isn t even being executed.
This post seems to have some similarities to what is happening to me:
doSubmit in javascript
But all the items i need to change are being changed with javascript in the same page, after submiting they get the new values.
What gets weirder is that it works properly in firefox and google chrome browser, however it is company politics that all aplications work in internet explorer and in internet explorer it doesn't work.
So i would like to know how to see what is being passed to wwv_flow.accept so i can discard that option?
Regards Pedro

Greetings,
I am working with Pedro Mendez in the same project.
To give you more information about the problem, here is an example of the html structure in the page, just the div wich is causing problems:
<div id="empresas">
<form id="empresas_form" method="POST" action="" name="empresas_form">
<input type="checkbox" name="empresas" value="DEMO2"/>
Empresa Demonstração ( Demo 2)
<input type="checkbox" name="empresas" value="SPA"/>
SPA
<input type="checkbox" name="empresas" value="GRH2"/>
GRH2 - Brodheim
<input type="checkbox" name="empresas" value="DEMO3"/>
DEMO3 DEMONSTRAÇÂO
<input type="checkbox" name="empresas" value="GRH"/>
GRH - IMO
<input type="checkbox" name="empresas" value="OK"/>
OK
<input type="checkbox" name="empresas" value="VALSAN"/>
Valentim Santos
</form>
</div>
To my understanding the variable that shoudl cause problems would be empresas_form and not empresas, since empresas is just a div.
I need the checkboxes to be inside a form or i can t access them and i need to perform operations on them, any suggestions?
best regards

HT4436 I updated the software on my iphone to 7.0.4 and since then all my contacts are gone. I tried to sign into icloud and it said my account is not verified. It said I should go to my mail to see how to verify my account but there is no instruction in

I updated the software on my iphone to 7.0.4 and since then all my contacts are gone. I tried to sign into icloud and it said my account is not verified. It said I should go to my mail to see how to verify my account but there is no instruction in my mail

Hi stanlaw,
Welcome to the Support Communities!
The information below should help you with this.
Associating and verifying email addresses with your Apple ID
http://support.apple.com/kb/HE68
How to verify the primary email address for your Apple ID
When you first create an Apple ID (using your email address) a verification email will be sent to that address. If you sign in to your Apple ID from the link in that email, the email address will be verified as the primary email address for your Apple ID. You can also resend the email verification if the email address is not verified:
1. Sign in to My Apple ID to manage your account information.
2. Click Resend under Primary Email Address.
3. Verify your changes by following the link in the email you will receive from Apple and signing back in to your account.
I hope this information helps ....
Happy Holidays!
- Judy

How to verify my apple id, how to verify my apple id

how to verify ,my apple id ?

Hi nimfajoy,
For information on verifying your primary email address, see this article:
Associating and verifying email addresses with your Apple ID
http://support.apple.com/kb/HE68
How to verify the primary email address for your Apple ID
When you first create an Apple ID (using your email address) a verification email will be sent to that address. If you sign in to your Apple ID from the link in that email, the email address will be verified as the primary email address for your Apple ID. You can also resend the email verification if the email address is not verified:
1. Sign in to My Apple ID to manage your account information.
2. Click Resend under Primary Email Address.
3. Verify your changes by following the link in the email you will receive from Apple and signing back in to your account.
Cheers!
Matt M.

How ASA forwarding traffic to AIP-SSM

Hi All,
Can someone help how ASA device forwarding traffic to AIP-SSM? I'm not taking abt Configuration part like Class-map, policy-map and service policy....want to understand the traffic flow from ASA once traffic matched with ACL to AIP-SSM.
From one of Cisoc document, understood that the module using a Cisco Propietary protocol for communicating with ASA appliance.
================================================================================================================
FYR from Cisco Website:
Q. How does the Cisco ASA AIP-SSM plug into and communicate with the appliance?
A. The Cisco ASA AIP-SSM plugs directly into the SSM slot in the Cisco ASA appliance's chassis. This provides a direct connection to the appliance's backplane. Once the module is installed, a proprietary protocol runs over the bus and controls data flow and messaging between the module and appliance.
================================================================================================================
Regards,
S.Vinoth

Hey ,
as you mentioned above , it uses a cisco Probietary protocol for that communication , there are two interfaces , control channel and data channnel , data channel is where the traffic being forwarded , the backplane is the connection between the ASA and the IPS interface .
Hope that this helps .
Mohammad.

How to buy license? for AIP-SSM-10 ?

Hi all
how to buy license? for AIP-SSM-10 ?
1. CON-SU1-AS1A1PK9 this is Cisco SMARTnet Support for AIP-SSM-10
2. do I need smartnet for ASA ?
3. what is part number of license ?
ASA5510test# session 1
Opening command session with slot 1.
Connected to slot 1. Escape character sequence is 'CTRL-^X'.
login: cisco
Password:
***NOTICE***
This product contains cryptographic features and is subject to United States
and local country laws governing import, export, transfer and use. Delivery
of Cisco cryptographic products does not imply third-party authority to import,
export, distribute or use encryption. Importers, exporters, distributors and
users are responsible for compliance with U.S. and local country laws. By using
this product you agree to comply with applicable laws and regulations. If you
are unable to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to
[email protected].
***LICENSE NOTICE***
There is no license key installed on the SSM-IPS10.
The system will continue to operate with the currently installed
signature set. A valid license must be obtained in order to apply
signature updates. Please go to http://www.cisco.com/go/license
to obtain a new license or install a license.
sensor#
sensor# sh ver
Application Partition:
Cisco Intrusion Prevention System, Version 6.0(6)E3
Host:
    Realm Keys          key1.0
Signature Definition:
    Signature Update    S399.0                   2009-05-06
    Virus Update        V1.4                     2007-03-02
OS Version:             2.4.30-IDS-smp-bigphys
Platform:               ASA-SSM-10
Serial Number:          ........
No license present
Sensor up-time is 21 min.
Using 655507456 out of 1032499200 bytes of available memory (63% usage)
application-data is using 39.7M out of 166.8M bytes of available disk space (25%
usage)
boot is using 37.6M out of 68.6M bytes of available disk space (58% usage)
MainApp          N-NUBRA_2009_JUL_15_01_10_6_0_5_57   (Ipsbuild)   2009-07-15T01
:15:08-0500   Running
AnalysisEngine   N-NUBRA_2009_JUL_15_01_10_6_0_5_57   (Ipsbuild)   2009-07-15T01
:15:08-0500   Running
CLI              N-NUBRA_2009_JUL_15_01_10_6_0_5_57   (Ipsbuild)   2009-07-15T01
:15:08-0500
Upgrade History:
IPS-K9-6.0-6-E3   17:48:06 UTC Wed Jul 15 2009
Recovery Partition Version 1.1 - 6.0(6)E3
sensor#

Hi,
CON-SU1-AS2A10K9 contract if for ASA+IPS bundle. If AIP-SSM-10 ws purchased as a spare the contract would be CON-SU1-ASIP10K9.
I am not sure whether or not this Cisco Service for IPS contract can be used to cover just the AIP-SSM-10 if it was purchased as part of a Bundle instead of a Spare.
I would recommend that you check with your Cisco reseller or Cisco Sales Representative.
Sourav

AIP-SSM How to Verify Traffic is being passed for inspection?

Similar Messages

Maybe you are looking for