Messages

Agent Messages

Action: Verify that the log file is owned by user:group ids:ids; that the ids user has read and write permissions on the file; and that its parent directory has read and write permissions.

idsagent: DSP type dsp required by template template not found

Meaning: Template template requires a data source dsp that is not supported by this version of HP-UX HIDS.

Action: Ensure that you have installed the latest version of the HP-UX HIDS product.

idsagent: error trying to shutdown a process

Meaning: idsagent was unable to cleanly shut down one of the HP-UX HIDS subprocesses.

Action: This error may occur but idsagent will still clean up processes.

idsagent: failed to allocate memory

Meaning: An internal memory error occurred.

Action: Contact HP support.

idsagent: failed to create schedule path filename

Meaning: An internal memory error occurred.

Action: Contact HP support.

idsagent: failed to create/overwrite schedule path file file: msg

Meaning: idsagent was unable to save the surveillance schedule to a file named file.

Action: Verify that the /var partition has free disk space; that /var/opt/ids exists;

that it is owned by user:group ids:ids; and that it is writable by user ids.

idsagent: failed to execute correlator: corr

Meaning: idsagent failed to execute the correlator subprocess, corr

Action: Verify that the /opt/ids/lbin/idscor file exists; that it is owned by

user:group ids:ids; and that it is readable and executable by user ids.

idsagent: Failed to execute the DSP dsp

Meaning: idsagent failed to execute data source subprocess dsp.

Action: Verify that the /opt/ids/lbin/idskerndsp file exists; that it is owned by

user:group ids:ids; and that it is readable and executable by user ids. Verify that the /opt/ids/lbin/idssysdsp file exists; that it is owned by user:group root:ids; and that it is readable and executable by user root, and has the setuid bit set.

idsagent: failed to initialize interprocess communication

Meaning: idsagent was unable to initialize the memory mapped file communications between subprocesses.

Action: Verify that there is at least 10 MB of free disk space in the /var partition and that the kernel configuration supports memory mapped files. It is possible that other processes (such as OpenView) may have used all the kernel memory mapped file resources.

226

Appendix F

Page 238
Image 238
HP Host Intrusion Detection System (HIDS) Idsagent error trying to shutdown a process, Idsagent failed to allocate memory