HP-UX Host Intrusion Detection System Version 4.7 Administrator Guide HP-UX 11i v3 (766144-001, March 2014)

Table 56 Agent Error Messages (continued)
ActionMeaningError Message
Verify that the configuration file is
owned by user:group ids:ids, that it
The idsagent received a SIGHUP but
encountered an error while rereading the
idsagent: new configuration failed
is readable by user ids, and that it
has not been corrupted.
/etc/opt/ids/ids.cf configuration
file.
Contact HP support.A surveillance schedule contains a
reference to a detection template that is not
supported on this agent.
idsagent: No support for template
named template
Free up disk space in the /var
partition.
The /var partition is full.idsagent: not enough disk space
available to create log file file
Ensure that there is at least 20 MB of
free disk space in the /var partition.
The system does not have enough disk
space to create the interprocess
communication files in /var/opt/ids.
idsagent: not enough disk space to
create memory mapped file
You can remove any files with names
HP-UX HIDS uses memory mapped files,
each 20 MB in size.
in the form /var/opt/ids/
ids_10*.
Ensure that there is at least 10 MB of
free disk space in the /var partition.
The /var partition is full and the
idsagent cannot save the schedule to
disk.
idsagent: not enough disk space to
create schedule
Ensure that there is free disk space
in the /var partition.
The idsagent was unable to parse the
surveillance schedule because the system
has exhausted its disk space.
idsagent: not enough disk space to
parse schedule
Clean up the root file system partition
to free space.
The system has exhausted the disk space
in the root file system partition.
idsagent: not enough disk space to
save config file
Your system has run out of process
table space. Either kill unneeded
There are no process table slots free on the
system.
idsagent: out of process table space
processes or reconfigure the kernel
to allow for more user processes.
Verify that you have the latest version
of HP-UX HIDS installed on the agent
system.
The surveillance schedule contains detection
templates that are not supported by this
version of the idsagent.
idsagent: schedule cannot be
executed as specified
Verify that the surveillance schedule
contains surveillance groups in the
A surveillance schedule sched was
activated on the agent that did not contain
any valid surveillance groups.
idsagent: Surveillance Schedule
sched does not contain any
surveillance group periods
Schedule Manager window of the
HP-UX HIDS System Manager.
If running on a multihomed system,
set the IDS_LISTEN_IFACE parameter
in /etc/opt/ids/ids.cf.
The idsagent does not know which
network interface to listen on for
commands. The IDS_LISTEN_IFACE
idsagent: this host (host) has
multiple network addresses
parameter must be set in the configuration
file /etc/opt/ids/ids.cf. Specify a
host name or IP address in the
configuration file.
Change the
IDS_LISTEN_IFACEparameter in
This is not a valid address or name for this
host. This host name does not resolve to a
unique network address. The idsagent
idsagent: the IDS_LISTEN_IFACE
parameter is specified as: hostname
in the configuration file configfile
the [global] section of the
does not know which network interface to
listen on.
configuration file to a valid address
or name for this host.
If the file should not have changed,
treat it as a potential intrusion.
File filename, which is being monitored
by the idssysdsp process, has been moved.
idssysdsp: NOTE: inode of file
filename was changed (ok if log
rotation expected on this file) This is acceptable if the file has just
undergone expected log file rotation.
If the file should not have changed,
treat it as a potential intrusion.
File filename, which is being monitored
by the idssysdsp process, changed in size.
idssysdsp: NOTE: size of file
filename decreased (ok if log
rotation expected on this file) This is acceptable if the file has just
undergone expected log file rotation.
198 Error Messages