38 Troubleshooting Global Faultscd /var/tmpmkdir logdirsnort -dvei bond 0 (fp1:fp2) -b -l logdirThe preceding command will result in a log file as follows:snort.log.11352792994 Enter the following series of commands for a packet capturewith tcpdump. Set the parameter snaplento 0, to catch wholepackets.cd /var/tmptcpdump -I bond0 (fp1:fp2) -s0 -w pcapfile--End--Troubleshooting memory problemsThis section describes the process of troubleshooting memory problems.To track memory issues, the maintenance tool RPMmust be installed. Onceinstalled the tool does not harm the system.Procedure 28Procedure stepsActionRun the following command to install the RPM that collects datafor troubleshooting performance issues.rpm -I Sourcefire_Maintenance_Tools-0.1.0-1.i386.rpmRunning the preceding command adds a modified version of topthat logs output to the following location every 60 seconds./var/log/top.logIPS mode cable Deployment ScenariosThis section describes the various IPS mode cable deployment scenarios.Deploying between two endpoints• Use two straight through cables to deploy the IPS between 2 endpoints. No special cabling is needed.• The sensor supports auto MDI/MDI-X so the link will be negotiatedproperly when the sensor is in the normal operational state.• When the sensor is placed into bypass mode it internally implements acrossover and allows normal operation of the connection.Nortel TPS 4.7Threat Protection System Troubleshooting GuideNN47240-700 01.01 Standard11 2007Copyright © 2007 Nortel Networks.
