Security Monitor Events display incorrect time
I have a time issue between a 4240 sensor (5.0) and Security Monitor (2.1). The events in the sensor are correct but 7 hours off in Security Monitor, even though the VMS server understands the correct time (knows there are events in the last hour) but will not display them. After doing some research, it looks as though we needed to load CSCOids2.1.0-sol_SecMon_2_1_Service_Pack_1-6.tar right? Well I did, ran the perl script, everthing was successful. CiscoWorks shows the patch as being applied. Reloaded VMS and the sensor, and still I have what seems like a UTC problem (UTC offset always =0 yet time zone=arizona). Any suggestions?
Thanks!
Is the correct offset configured on the sensor?
Execute "show conf" and verify the value for the timezone offset. Remember that this is in minutes and not hours. If the timezone diffence is 7 hours then the value on the sensor should be 7hours*60minutes=420minutes.
Also use "show events" on the sensor to look at a few alerts on the sensor itself. It will report both the UTC/GMT time and the Local time. Verify that the offset between the 2 is correct on the sensor. (be sure to account for summertime/daylight savings time)
Similar Messages
-
Dashboard clock displays incorrect time for remote cities
Hi all,
Small issue here : I added a new clock in dashboard to display the time in Rabat, Morocco.
Unfortunately the clock is an hour off (shows 10pm when it is actually 11pm there).
I already asked the google friend, always the same answer : check your time zone in preferences, which I did.
> My current location & time zone are correctly set (Brussels, Belgium CEST), time is correctly displayed for this location both on the desktop and in dashboard clock.
> Tried allowing the system to determine my current time zone automatically, no change.
> Date & time is set automatically via apple euro time server.
Does anyone know what's wrong here? Something related to daylight saving time maybe? (seems odd but I ran out of ideas.)
Thanks a bunch,
NicolasThis same problem stared plaguing me as well yesterday (iPhone 5c), maybe a week after upgrading to iOS 8.3. I've tried everything (which isn't much, right?) to no avail. Among the symptoms were time and date wrong (of course) but also intermittent WiFi misbehavior (e.g., disconnects) and very sluggish response on the set Date & Time page (Settings : General : Date & Time)--when setting the "Set Automatically" slider from off to on or vice-versa it would often take many seconds to respond (and I'd swear the sliding circle looks a tiny bit elongated when stuck).
Anyway, this morning I let the power drain normally and kept it that way for a few hours. I've now plugged it back in to charge and the time has been correct for the past 45 min. and counting, so this may be a remedy. I'll check back in later today with progress. -
Why is my iPhone displaying incorrect time?
Image should explain all.
The time at the top is 8 hours behind. I can't correct it because when I go into Time, it's correct!
Many thanksHey there JonnyAustin,
It looks like your phone is showing an incorrect time but it is set correctly in Settings. I would start with quitting all the running apps on the device:
iOS: Force an app to close
Double-click the Home button.
Swipe left or right until you have located the app you wish to close.
Swipe the app up to close it.
When you have done that restart the device and test the issue again:
iOS: Turning off and on (restarting) and resetting
If the issue persits, I would next use the troubleshooting in the following article for additional assistance:
iOS: Troubleshooting issues with date and time - Apple Support
Thank you for using Apple Support Communities.
Cheers,
Sterling -
Same calendar event displaying multiple times
Hi, I currently see the same calendar event three times in different colors. I am utiling active sync and am on firmware 2.1. This started happening recently therefore I know this is not a firmware issue.
I have blown away my account and re-established it. Anyone have any ideas.Hi, I currently see the same calendar event three times in different colors. I am utiling active sync and am on firmware 2.1. This started happening recently therefore I know this is not a firmware issue.
I have blown away my account and re-established it. Anyone have any ideas. -
VMS Security Monitor Event Rules - Email Script Question
Reference: "Configure E-mail Notifications with Scripts for IDS Alerts Using CiscoWorks Monitoring Center for Security"
http://www.cisco.com/en/US/customer/products/hw/vpndevc/ps4077/products_configuration_example09186a00801fc770.shtml#fivesensor
Good day all -
I have created the Email Notification process as desribed in the linked article. The script runs as expected when a High severity alert is triggered but does not fill in the variables within the email body. I have double-checked that I have the right version of the script for the sensors that we are using. Has anyone else been working with this (or some other) scripting solution and maybe have a suggestions on what to try next?Try the configuration available at the URL http://cisco.com/en/US/docs/security/security_management/vms/security_monitor/2.2/user/guide/ch05.html.
-
IPhone sometimes displays incorrect time!
It's frustrating having to reset my iphone so that it will then display the correct time. What's causing this and is there some work-around? Otherwise, it's a rather amazing little device. Thanks for any feedback.
Thanks for the link! I'll just set "automatically set time" to "off". (settings>general>date & time)
I don't travel that much, so time zones are not an issue. Perfect solution! A million thanks. -
Iphone displays incorrect time
My iphone 5 recently began reporting wrong time. It currently says APR 26, 2033 8:27am
that time/date cannot be changed to reflect current .
What is the solution?Is "Set automatically" switched on in Settings>General>Date & Time?
-Ethan -
Informational events in security monitor
I am looking for the configuration method so that the VMS security monitor will display informational events in addition to low, med., and high events..
The documentation I have found explains what the informational event is, but I cannot find out how to enable it in security monitor..
thanks!It should display all events unless you have an event viewer filter. An event viewer filter can be configured for example to only show high severity events.
http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/cw2000/mon_sec/secmon20/ug/ch04.htm#wp322119 -
ICals on OS X & iOS display different time for same event
I am in UTC+8 time zone. My boss is in UTC-5 time zone. I have set up sync service on my MBA and iPhone iCals with my company's MS Exchange Server.
I have a weekly meeting invitation from my boss, my MBA iCal displays this meeting on 10:30pm which is wrong, while my iPhone and MS Server displays 9:30pm which is corret - the meeting takes places on 9:30pm my time.
All my other iCal events are fine on both devices, only this weekly event displays different time. I have taken with MBA and iPhone to travel around the world over the past half year and switched time zones on them, but they are all set to adjust time zones automatically, and they are with most up-to-date system. Why does MBA iCal displays wrong time? Can I adjust it? This problem exisits on Lion and now also on M Lion.
Thanks for everyone's attention and help in advance!Try using floating time zones. It helped for me.
-
VMS 2.2 + IDS 4.1(2) - delay of events displaying.
Hi!
Our customer have IDS 4235 4.1(2) S147 and VMS 2.2 (security monitor 1.2.3).
We simulated attack to the remote host, but events appeared on the security monitor (events) with 10 20 minutes delay. And also, when we attempt enable all IDS signatures, IDS crash and stop responding.
Help, PLZ. Hi!IDS 4.1 communication protocol (RDEP) uses pull model. This means that VMS security monitor should periodically download new events from the sensor. You should find parameter in the security monitor that is responsible for periodic downloading of events. Also, don't enable all signatures on the IDS sensor -- it may run out of memory. Check how much free memory is available with "show version" command.
Also, your sensor may not handle traffic load. There is a Sig 993 (if I remember correctly), which is disabled by default in 4.1, that can help you troubleshoot this.
Don't forget to rate all posts. -
How to display events of only one IPS in Security Monitor?
Hello,
i searched the forum with no result. I have CW 2.2 with IDSMC 2.1. I got two IPS and 2 IDSM-2 (4.x is in production / 5.x is in test) which have all their four interfaces sniffing in different network segments. Now i am flooded by the thousands of messages from the internet with no possibilty to just concentrate my view on the events generated on only one special interface of a single IPS.
To temporarily focus only one one interface of a single IPS how can i filter the events in Security Monitor to only display the events of a this device and a single interface?
This would be extremly helpfull for to simulate attacks in an test environment with shuning/blocking. I have rare possiblities to set up a second CW IDSMC on another machine. And after all, i would appreciate to focus (filter) in that way for later examining my network to tune signatures and events.
Furthermore, on IEV 4.1 i was able to get a real time dashboard showing 'real time' events. I did not see this functionality for IPS 5.x and IDSMC. How can i view real time data there to see my networks reaction to simulated attacks.
Any ideas how to only display only wanted data in Security-Monitor?
Thanks in advance, GerhardAs far as I know, you cannot display the events of only one IPS in Sec Mon.
-
I would like to have my MacPro laptop display and 2 external monitors (three displays). Question, how can I have more than one application displayed at a time? IE: I would like email on one monitor, Finder on my laptop, and iTunes on the other. Possible?
With extended desktop, it appears that I can only have one application presenting at a time. Sort of defeats the purpose of having multiple displays.
I am using the HDMI and the mini HDMI connectors.I would like to have my MacPro laptop display and 2 external monitors (three displays). Question, how can I have more than one application displayed at a time? IE: I would like email on one monitor, Finder on my laptop, and iTunes on the other. Possible?
With extended desktop, it appears that I can only have one application presenting at a time. Sort of defeats the purpose of having multiple displays.
I am using the HDMI and the mini HDMI connectors. -
Simple Event being Displayed Multiple Times
I have a simple event from the past that is being displayed multiple times. There are no other UIDs that are the same in iCal and no other event has the same SUMMARY name.
This particular event shows up 9 times. I can also reproduce the result from Automator by searching the specific calendar and looking for events in the date range.
The event is as follows:
BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//Apple Inc.//iCal 3.0//EN
CALSCALE:GREGORIAN
BEGIN:VEVENT
SEQUENCE:5
TRANSP:OPAQUE
UID:EC6F5DBC-9BCC-4007-87F2-4A9C796C8551
DTSTART:20070330T000000
DTSTAMP:20071206T205550Z
SUMMARY:Babysit Paul
CREATED:20080919T173959Z
DTEND:20070401T120000
END:VEVENT
END:VCALENDAR
I am not very familiar with the format but it looks pretty straight forward.
The calendar is being synched via Mobile Me and is shared by another two computers. Not sure why this should be relevant since the entry on the computer and on Mobile Me both show this duplication of the event.
The reason I was looking at all was because of the hangs in iCal since I set the sync to automatic.
Any ideas welcome,
RichardPost Author: foghat
CA Forum: Data Connectivity and SQL
If all the records you are displaying in your report
truly are duplicated, you could try check off 'select distinct records'
from the File --> Report Options menu. While this may solve the problem for you, it would be worthwhile to determine if you are actually joining your tables correctly.
likely the records aren't an exact duplicate and the problem is with your join criteria. To verify this you can: start by removing table b from the database expert altogether. does
that solve your problem of multiple rows? If it does, you are not joining to table b correctlyIf you still have
multiple rows, loan_id on its own must not make a record unique. Is
loan_id duplicated in either of your tables? Just because loan_id is a
primary key does not necessarily mean it is unique - often a record
will have 2 or more primary keys and only when all primary keys are
used is the record unique. If you display all of the columns
from both tables, you will hopefully see some (maybe just one) columns
where the value is different between your seemingly duplicate data.
You may need to join on this value as well.as for the type of join you are using (inner, not enforced) you should be fine. Good luck -
Incorrect Display of Time by Portal Report
Any assistance would be much appreciated:
Portal report display of a date field using MM-DD-
YYYY:HH24:SS:MI is off by 12 hours. Select of same field and
mask via SQL*Plus looks okay.
Thanks in advance,
- LTGChetan,
Thanks for responding... I'm not sure I follow your suggestion...
Here is some more info about the problem.
I used the Portal "Reports From Query Wizard" to create a
tabular report from a pretty simple db table containing an
Oracle date field. In the Column Formatting window I entered MM-
DD-YYYY:HH24:MI:SS for the format mask for the Oracle date
field. When I run the report, the Oracle date field is
displayed with an incorrect time (18:52:20 is displayed as
06:52:20). An Sql*Plus query using to_char(timestamp,'MM-DD-
YYYYY HH24:MI:SS') displays the correct time.
I attempted to put to_char(timestamp,'MM-DD-YYYYY HH24:MI:SS')
into the format mask for the Oracle date field in the Column
Formatting screen (instead of MM-DD-YYYY HH24:MI:SS). No
apparent effect.
Did I follow your suggestion correctly? Is there something more
to do? Please advise?
Thanks,
Len Greenberg -
I double-click on event to see all the photos in that event displayed, but all I get is 1 large photo on the edit page. To see the photos in that event, I have to scroll. Need to be able to work with all the photos in that event, not one at a time.
Maybe you need to adjust the zoom slider in the lower left corner of the window?
Regards
Léonie
Maybe you are looking for
-
I need the Java Development Toolkit to work on a specific site to measure packet loss. As Firefox lists the plugin as a security risk there is no way to "enable" it permanently. So i choose the "ask to activate" option. but when i visit the site that
-
I am a new subscriber to Verizon. I got my LG Lucid phone on April 18th, and have not turned back. Not even for a second! I was a customer of Metro PCS when I decided to go to Verizon, but it really didn't take a lot of thought to make this decision.
-
I must say the performance of the fulfillment house has me chewing my nails. It took them days to do the simple act of processing a credit card and since then three days have passed and still no shipment. GRRRrrrrrrr. But I would like a jump on wha
-
Mouse back/forward buttons don't respond after exiting from full screen Flash video
Yeah. Has anyone else encountered this? After viewing a full screen video (YouTube, Hulu) and exiting (via the ESC button), the back and foward buttons on my mouse stop responding. Really! Usually I will have to go back into a full-screen video twice
-
My Nano shuts off in the middle of playing music/podcasts. It won´ respond until plugged in, then apple logo appears and it restarts. I restored factory settings and installed the newest OS which worked for a week, but it´s the same problem today.