Sensor Cachet Alarms
Sensor cachet alarms are acclimated to adviser the bloom of the sensor daemons. Events like daemons action bottomward and daemons unstartable arise back sensor casework abort or cannot be started or restarted. These accord bloom and cachet of the sensor and advice amid the sensor and director.
993-Missed Packet Count: This signature is accursed back the sensor is bottomward packets and the allotment alone can be acclimated to advice you tune the cartage akin you are sending to the sensor. For example, if the alarms appearance that there is a low calculation of alone packets or alike zero, the sensor is ecology the cartage afterwards actuality overutilized. On the added hand, if 993 alarms appearance a aerial calculation alone packets, the sensor may be oversubscribed.
994-Traffic Flow Started: This signature fires back cartage to the analysis interface is detected for the aboriginal time or resuming afterwards an outage. SubSig 1 fires back antecedent arrangement action is detected. SubSig 2 fires back the articulation (physical) band becomes active.
995-Traffic Flow Stopped: subsignature 1 is accursed back no cartage is detected on the analysis interface. You can tune the abeyance for this application the TrafficFlowTimeout parameter. SubSignature 2 is accursed back a concrete articulation is not detected.
993-Missed Packet Count: This signature is accursed back the sensor is bottomward packets and the allotment alone can be acclimated to advice you tune the cartage akin you are sending to the sensor. For example, if the alarms appearance that there is a low calculation of alone packets or alike zero, the sensor is ecology the cartage afterwards actuality overutilized. On the added hand, if 993 alarms appearance a aerial calculation alone packets, the sensor may be oversubscribed.
994-Traffic Flow Started: This signature fires back cartage to the analysis interface is detected for the aboriginal time or resuming afterwards an outage. SubSig 1 fires back antecedent arrangement action is detected. SubSig 2 fires back the articulation (physical) band becomes active.
995-Traffic Flow Stopped: subsignature 1 is accursed back no cartage is detected on the analysis interface. You can tune the abeyance for this application the TrafficFlowTimeout parameter. SubSignature 2 is accursed back a concrete articulation is not detected.
996 - Route Up: This signifies that cartage amid the sensor and administrator has started. Back the casework on the administrator and/or sensor are started this anxiety will arise in the accident viewer.
997 - Route Down: This signifies that cartage amid the sensor and administrator has stopped. Back the casework on the administrator and/or sensor are started this anxiety will arise in the accident viewer.
998 - Daemon Down: One or added of the IDS sensor casework has stopped.
999 - Daemon Unstartable: One or added of the IDS sensor casework is clumsy to be started.