Host Intrusion Detection System Administrator's Guide Release 3.0

Messages
Agent Messages
Appendix F
226
❏ Action: Verify that the log file is owned by user:group ids:ids; that the ids user has
read and write permissions on the file; and that its parent directory has read and
write permissions.
idsagent: DSP type dsp required by template template not found
❏ Meaning: Template template requires a data source dsp that is not supported by
this version of HP-UX HIDS.
❏ Action: Ensure that you have installed the latest version of the HP-UX HIDS
product.
idsagent: error trying to shutdown a process
❏ Meaning: idsagent was unable to cleanly shut down one of the HP-UX HIDS
subprocesses.
❏ Action: This error may occur but idsagent will still clean up processes.
idsagent: failed to allocate memory
❏ Meaning: An internal memory error occurred.
❏ Action: Contact HP support.
idsagent: failed to create schedule path filename
❏ Meaning: An internal memory error occurred.
❏ Action: Contact HP support.
idsagent: failed to create/overwrite schedule path file file : msg
❏ Meaning: idsagent was unable to save the surveillance schedule to a file named
file .
❏ Action: Verify that the /var partition has free disk space; that /var/opt/ids exists;
that it is owned by user:group ids:ids; and that it is writable by user ids.
idsagent: failed to execute correlator: corr
❏ Meaning: idsagent failed to execute the correlator subprocess, corr
❏ Action: Verify that the /opt/ids/lbin/idscor file exists; that it is owned by
user:group ids:ids; and that it is readable and executable by user ids.
idsagent: Failed to execute the DSP dsp
❏ Meaning: idsagent failed to execute data source subprocess dsp .
❏ Action: Verify that the /opt/ids/lbin/idskerndsp file exists; that it is owned by
user:group ids:ids; and that it is readable and executable by user ids. Verify that
the /opt/ids/lbin/idssysdsp file exists; that it is owned by user:group root:ids;
and that it is readable and executable by user root, and has the setuid bit set.
idsagent: failed to initialize interprocess communication
❏ Meaning: idsagent was unable to initialize the memory mapped file
communications between subprocesses.
❏ Action: Verify that there is at least 10 MB of free disk space in the /var partition
and that the kernel configuration supports memory mapped files. It is possible that
other processes (such as OpenView) may have used all the kernel memory mapped
file resources.