OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: RE: Two IP addressess in the same NIC
From: Duncanson, Robert (robert.duncansongb.unisys.com)
Date: Thu Nov 16 2000 - 05:36:07 CST


TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
majordomoiss.net Contact issforum-owneriss.net for help with any problems!
----------------------------------------------------------------------------

It won't matter because it has no concept of NIC nor IP's. Think of how your
file-scanning virus-protection package doesn't care if you have 1 or more
hard drives. (Not intended to be a perfect analogy, of course).

-----Original Message-----
From: zsolt.korosnoreg.hu [mailto:zsolt.korosnoreg.hu]
Sent: 15 November 2000 19:01
To: issforumiss.net
Cc: JLindleyiss.net
Subject: RE: Two IP addressess in the same NIC

TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
majordomoiss.net Contact issforum-owneriss.net for help with any
problems!
----------------------------------------------------------------------------

Hi everybody,

I wonder what is the situation when RS Server Sensor is used on a host with
more than one NIC or IP address?

Dr. Zsolt Koros
director of NOREG Ltd.
phone/fax: +36-1-488-0427

-----Original Message-----
From: Lindley, Jim (ISSAtlanta) [mailto:JLindleyiss.net]
Sent: Tuesday, November 07, 2000 11:13 PM
To: 'asaavedrascitum.com.mx'; issforumiss.net
Subject: RE: Two IP addressess in the same NIC

TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
majordomoiss.net Contact issforum-owneriss.net for help with any
problems!
----------------------------------------------------------------------------

Adrian:

RS OS Sensors don't work with IP addresses. Rather, the OS Sensor parses
various audit log streams (NT, syslog, etc.) So you can have many NICs with
many IPs on a Server, and OS Sensor could care less, because it is working
at the Operating System audit log level. As for why an RS Consol cannot
contact the OS Sensor, that is something that should be explored with
supportiss.net by sending them as much information about your problem as
possible.

James R Lindley
Anomaly Detection Xpert
Global Surveillance and Reconnaisance Group
Managed Security Services Special Operations Group
Internet Security Systems, Inc.
Vox: 678-443-6323
Fax: 678-443-6476
An unquenchable thirst for Pierian waters.

Internet Security Systems -- The Power to Protect

Confidentiality Notice: This message is being sent by or on behalf of a
network security professional. It is intended exclusively for the individual
to whom it is addressed. This communication may contain information that is
proprietary, privileged or confidential. If you are not the named addressee
(to or cc), you are not authorized to read, print, retain, copy or
disseminate this message or any part of it. If you have received this
message in error, please notify the sender immediately by e-mail and delete
all copies of the message.

-----Original Message-----
From: asaavedrascitum.com.mx [mailto:asaavedrascitum.com.mx]
Sent: Monday, November 06, 2000 2:56 PM
To: issforumiss.net
Subject: Two IP addressess in the same NIC

TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
majordomoiss.net Contact issforum-owneriss.net for help with any
problems!
----------------------------------------------------------------------------

 Hello all,

 I need to know if it is possible to have a OS Sensor working with two IP
 addressess because the console cannot contact it!

 any ideas?
 thanks

Adrián Saavedra D.
Consultor en Seguridad Informática
SCITUM Consulting
Tel. (52) 55340062 ext. 4003
asaavedrascitum.com.mx