HP-UX Host Intrusion Detection System Version 4.4 Administrator Guide (5900-1634, April 2011)

Table 57 System Manager Error Messages (continued)
ActionMeaningError Message
Either specify a specific IP address
or 0.0.0.0. If you specify a
specific IP address, it must
correspond to the network interface
for the network connecting the
administration and agent systems.
If 0.0.0.0 is selected, the
administration system can be
connected to agent systems that are
reachable on any of the
administration’s network interfaces.
On your administration system, edit
/opt/ids/bin/idsgui. Set the
INTERFACE variable to either the
IP address you have chosen, or to
0.0.0.0 ( or "::" for
IPV6) .
NOTE: By setting the value of the
INTERFACE variable to 0.0.0.0 (or
"::" for IPv6), the System Manager
will listen on a port (see Configuring
Ports (page 34)) on all available
interfaces. The potential risk of
listening on all available interfaces
can be avoided by setting the
INTERFACE variable to an IP
address that the name service maps
to the local host name.
For example, change the
INTERFACE line to read
“INTERFACE=1.2.3.4”. When
you are done, reset the file
permissions to u=rx (500).
If the INTERFACE variable in
/opt/ids/bin/idsgui is empty, then the
local host name maps to multiple IP
addresses according to the name service
and the System Manager does not know
which IP address (and the corresponding
interface) to listen for agent connections.
If the INTERFACE variable in
/opt/ids/bin/idsgui is set to a host name,
then the specified host name maps to
multiple IP addresses according to the
name service and the System Manager
does not know which IP address (and the
corresponding interface) to use to listen
for agent connections.
If the INTERFACE variable in /opt/ids/
bin/idsgui is set to an IP address, then
the IP address does not map to the local
host name according to the name service
and the System Manager assumes that an
invalid IP address was specified.
This host (hostname) has multiple
network addresses. The INTERFACE
configuration setting in idsgui must
specify the hostname/IP address of
the interface to listen for connections
from agents or 0.0.0.0 or :: to listen
on all interfaces.
On each agent system, edit
/etc/opt/ids/ids.cf.If the
INTERFACE variable in step 2 was
set to a specific IP address, set the
REMOTEHOST parameter to the
same value. If the INTERFACE
variable in step 2 was set to
0.0.0.0, set the REMOTEHOST
parameter to the IP address of the
administration system with a
network interface connected to the
same network that the agent
interface is connected to. For
example, change the
REMOTEHOST line to read
“REMOTEHOST 1.2.3.4”. When
you are done, reset the file
permissions to u=r (400). If the
agent is currently running, instruct
the agent to reread ids.cf. See
“Forcing Active Agent to Reread
Configuration File” (page 186).
An error occurred during the save
operation. Ensure the availability of
sufficient disk space.
The application was unable to overwrite
the file using the specified name.
Unable to Overwrite: filename - File
Save Error.
206 Error Messages