IDS/9000 changed to ready for no reason

[Bosco Tsang]

When I activiate IDS/9000 via the admin console, the status reported is running. However, if I left it running for a few days in background with the admin console, it seems stopped working after sometime. When I open back the admin console, the status changed to ready. I have to activite it again in order to get it running again. Any idea what's happen here?

[Rainer von Bongartz]

What version of IDS/9000 are you using ??


You should update to Rel. 2.1 which is very stable compared to 1.0 and 2.0

Regards
Rainer

[Bosco Tsang]

I am using 2.1 which I've downloaded just a week ago. Unless there is newer version, I believe I am using the latest one already.

[Rainer von Bongartz]

Check which ids programs are still running.

ps -ef | grep ids

if this will report idsagent, idscor, idssysdsp... then your console has lost the connection and you might check and double the time out values in your admin GUI.
.

if only idsagent is running then the schedule was stopped. take a look at /var/adm/syslog/syslog.log and /var/opt/ids/error.log

Regards
Rainer

[Bosco Tsang]

In the error.log, that's what I found

Mon May 13 21:09:40 2002: ids/9000: process (PID:2360) idscor received unexpected signal 10
Mon May 13 21:09:40 2002: ids/9000: one of the IDS processes died abnormally: halting schedule execution

Nothing special logged in syslog.log