Host Intrusion Detection System Administrator's Guide Release 3.1

Messages
Agent Messages
Appendix F
235
❏ Meaning: This is not a valid address or name for this host. This host name does not
resolve to a unique network address. idsagent does not know which network
interface to listen on.
❏ Action: Change the IDS_LISTEN_IFACE parameter in the [global] section of the
configuration file to a valid address or name for this host.
idssysdsp: NOTE: inode of file filename was changed (ok if log rotation expected on
this file)
❏ Meaning: File filename , which is being monitored by the idssysdsp process, has
been moved. This is acceptable if the file has just undergone expected log file
rotation.
❏ Action: If the file should not have changed, treat it as a potential intrusion.
idssysdsp: NOTE: size of file filename decreased (ok if log rotation expected on this
file)
❏ Meaning: File filename , which is being monitored by the idssysdsp process, changed
in size. This is acceptable if the file has just undergone expected log file rotation.
❏ Action: If the file should not have changed, treat it as a potential intrusion.
Internal error
❏ Meaning: An internal error has occurred.
❏ Action: Please contact HP support.
Internal error: unknown state
❏ Meaning: An internal error has occurred.
❏ Action: Contact HP support.
unable to open the response script directory dir
❏ Meaning: idsagent was unable to open or read the /opt/ids/response directory
which contains the alert response scripts.
❏ Action: Ensure that the directory exists; that it is owned by user:group ids:ids; and
that it is readable and executable by user ids.