topic Re: SHOW INTRUSION - BUFOVF ? in Operating System - OpenVMS

SHOW INTRUSION - BUFOVF ?

Ruslan R. Laishev — Fri, 28 Mar 2008 09:14:36 GMT

Hello there!

Is there someone who have caugh the same:

$ show intrusion
Intrusion Type Count Expiration Source
Shared Memory !14<(!@UQ.!2ZL!AZ)!> !9@UQ !9@UQ !9@UQ
NETWORK SUSPECT 1 28-MAR-2008 13:13:48.43 DTW18::ipavlov
NETWORK SUSPECT 2 28-MAR-2008 13:15:53.03 DTW19::andrik07
NETWORK SUSPECT 1 28-MAR-2008 13:16:46.25 DTW19::griga
NETWORK SUSPECT 1 28-MAR-2008 13:15:43.54 POP3::89.253.25.118::B-O-V
NETWORK SUSPECT 2 28-MAR-2008 13:19:36.99 POP3::91.122.16.253::SKDSPB
$

OpenVMS/IA64/Alpha 8.3...

$ del /int *
$ sho int
%SHOW-F-NOINTRUDERS, no intrusion records match specification
$ sho int
%SHOW-F-NOINTRUDERS, no intrusion records match specification
$ sho int
%SHOW-F-NOINTRUDERS, no intrusion records match specification
$ sho int
%SHOW-F-NOINTRUDERS, no intrusion records match specification
$ sho int
%SHOW-F-NOINTRUDERS, no intrusion records match specification
$ sho int
Intrusion Type Count Expiration Source
Shared Memory !14<(!@UQ.!2ZL!AZ)!> !9@UQ !9@UQ !9@UQ
NETWORK SUSPECT 1 28-MAR-2008 13:19:05.51 DTW19::mostroy
NETWORK SUSPECT 1 28-MAR-2008 13:19:09.30 LOCAL:.DTV1::LAISHEV
$

Re: SHOW INTRUSION - BUFOVF ?

Karl Rohwedder — Fri, 28 Mar 2008 10:31:18 GMT

Yes, I just checked under V8.3, the same error message. V8.2 seems to be o.k.

regards Kalle

Re: SHOW INTRUSION - BUFOVF ?

Guenther Froehlin — Fri, 28 Mar 2008 18:29:25 GMT

Some global messages where added in a recent remedial kit but utilities like "SHOW INTRUSION" which have a dependency on this where not rebuilt and shipped with this kit. Fixed in a future remedial kit.

/Guenther

Re: SHOW INTRUSION - BUFOVF ?

John Gillings — Mon, 28 Apr 2008 20:32:36 GMT

Fixed in VMS83A_RMS-V0700

o The SHOW INTRUSION command produced incorrect output,
for example:

Intrusion Type Count Expiration Source
Shared Memory !14<(!@UQ.!2ZL!AZ)!> !9@UQ !9@UQ !9@UQ
NETWORK SUSPECT 1 25-MAR-2008 09:56:26.28 LOCAL:NODE

The VMS83A_RMS-V0500 patch changed the internal
message codes of the message text used by various
SHOW commands and contained a new version of
SHOW.EXE. However, some SHOW commands such as SHOW
INTRUSION are implemented in other images that were
not updated, causing a skew in message references.