Messages

1

Intrusion Detection and Prevention / Error reconfiguring IDS: Error (1) / Hyperscan: Error installing ids rules (1)

« on: August 03, 2020, 09:31:53 pm »

Two seperate issues with similar but slightly different Errors (1).

I can download the rules without a problem and have them all set to drop.
After I intstalled the non commercial rule from the plugins, Error reconfiguring IDS: Error (1) started to occure.

I've since removed that package but the issue persists whenever I download & update rules or make any other change to the settings. Since this started the Rules tab just loads but never shows any results.The IDS however seems to be running.

The other problem I have (and had before above started) is that I also get Error (1) when selecting Hyperscan instead of default.

Is there a way to purge/reset the IDS completely? Could this be related to low memory? Any ideas how to fix this?
Searches for Error (1) in this forum did not yield any results.

Thanks for any suggestions.

2

20.7 Legacy Series / Re: Why do I have NTP traffic to random IP's?

« on: July 31, 2020, 01:40:36 am »

Thanks for the explanation. Can I not simply have time synced via my specified DNS servers?

3

Intrusion Detection and Prevention / Ghost network detected

« on: July 31, 2020, 12:14:01 am »

I've received this warning in ntopng the other day.
Happened only once, but should I be concerned?

4

20.7 Legacy Series / Why do I have NTP traffic to random IP's?

« on: July 30, 2020, 11:27:06 pm »

From time to time NTP connections to IPs like 185.83.169.27 are made.
Why and how can I block them? I don't see an option for this particular protocol in the rules.
I have my VPN providers DNS IP configured.