- Community Home
- >
- Networking
- >
- Legacy
- >
- Switches, Hubs, Modems
- >
- Re: How to set up log-in traps on HP ProCurve swit...
Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Discussions
Discussions
Forums
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО08-25-2005 02:57 AM
тАО08-25-2005 02:57 AM
Re: How to set up log-in traps on HP ProCurve switches?
We can at least comiserate :,(
The event in Syslog/TrapLog for the 2524 is as follows:
mgr: SME TELNET Session - MANAGER Mode established
For the 28xx/530x:
mgr: SME TELNET from 10.11.12.13 - MANAGER Mode
As I said, I know not of any way to differentiate the PCM telnet from the intruder telnet using PCM alerts.
I did bring this to the attention of several people on the PCM beta stream and while this was one of the few I at least got a reply on, there was no encouraging news of anything being done about it. If anything is to be done about it, it would have to be done directly in PCM, either by improving the alert filter (rules) or by blocking(filtering out) the event from getting to the SysLog/TrapLog in the first place. I have already submitted suggestions for both.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО08-25-2005 03:13 AM
тАО08-25-2005 03:13 AM
Re: How to set up log-in traps on HP ProCurve switches?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО08-26-2005 03:29 AM
тАО08-26-2005 03:29 AM
Re: How to set up log-in traps on HP ProCurve switches?
That won't help with the older generation switches that don't include the IP but you might consider blocking them too since you cannot discern the origin from the alert anyway.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО08-26-2005 04:16 AM
тАО08-26-2005 04:16 AM
Re: How to set up log-in traps on HP ProCurve switches?
Is it possible to have multiple condition alerts in 2.0?
(Sorry, our license hasn't arrived yet heh)
ie
contains "TELNET" and does NOT contain "PCM IP"
?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО08-26-2005 05:04 AM
тАО08-26-2005 05:04 AM
Re: How to set up log-in traps on HP ProCurve switches?
The event filters are as follows:
number of events
has severity * AND
contains * AND
has source
. . IP
. . is in group
within a period of (tied to number of events >1)
I was able to filter out the PCM source IP alerts with my email spam filter.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО08-26-2005 05:19 AM
тАО08-26-2005 05:19 AM
Re: How to set up log-in traps on HP ProCurve switches?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО08-26-2005 06:56 AM
тАО08-26-2005 06:56 AM
Re: How to set up log-in traps on HP ProCurve switches?
A couple of the PCM guys have been seen in the discussion "PCM+ V2.0 Questions/Thoughts"
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=942870
I suspect they do lurk about silently. Just because I'm paranoid doesn't mean they are not watching me.
- « Previous
-
- 1
- 2
- Next »