HP-UX Host Intrusion Detection System Version 4.4 Administrator Guide (5900-1634, April 2011)

1. On the Host Manager screen, perform one of the following steps:
• Select Edit > Add Host > Load Hosts List File.
• Press Shift+F7.
The Open dialog box opens as shown in Figure 28. It defaults to the /var/opt/ids/
gui/logs directory and displays the Host Files.
Figure 28 Open Dialog
2. You can change the Files of type: dropdown list to All Files, and use the Look
in: dropdown list with the display list to choose the directory where your file resides.
3. Select your file from the list, and click Open to read the file, or Cancel to abort.
The entries in the file are added to the hosts list according to “Rules for Host Lists Files”
(page 83). The Monitored boxes are unchecked.
Rules for Host Lists Files
Host lists files, including /etc/hosts, are expected to be in the format described in hosts( 4).
They are processed by HP-UX HIDS, as follows:
• Lines with a pound sign (#) in column 1 are ignored. Pound signs found elsewhere in the line
are treated as ordinary characters.
• Blank lines are ignored.
• The first word in a line is used as the IP address. Duplicate IP addresses are ignored.
• The second word in a line is used as the host name. If there is no second word, the first word
is used as the host name.
Modifying a Host
You can modify a host entry even if a schedule is activated on the agent.
To modify a host entry, follow these steps:
Modifying a Host 83