How to start or stop Symantec Host IDS Agents

Article:TECH111720  |  Created: 2002-01-23  |  Updated: 2007-01-21  |  Article URL http://www.symantec.com/docs/TECH111720
Article Type
Technical Solution


Environment

Issue



This document describes how to start and stop Symantec Host IDS (HIDS) Agents on the Windows and Solaris platforms.


Solution



The Symantec HIDS Agent service starts automatically as a function of the installation process. There may be times when you want to start the Symantec HIDS Agent manually or times when you need to stop the service.

The HIDS Agent on Windows
You can start or stop the Symantec HIDS Agent either from the command line interface or through the Windows Control Panel.

To start the Agent:

    From a command line:
    1. Click Start > Run.
    2. In the Open field, type cmd and press Enter. A command prompt window opens.
    3. In the command window, change the directory to your HIDS installation directory. By default, this is: C:\Program Files\symantec\Host IDS\bin
    4. At the command prompt, type iIDSAgent.exe -start and press Enter.
    5. Close the command prompt window.

    From the Control Panel:
    1. Click Start > Settings > Control Panel.
    2. Click Administrative Tools.
    3. Click Services.
    4. Click Symantec Host IDS Agent.
    5. Click Action > Start.
    6. Close the Control Panel.
To stop the Agent:

    NOTE: Stopping the HIDS Agent disconnects you from the SESA Console and the Agent does not forward event information to the Manager. The SESA Agent notifies the Manager of the disconnection.
    From a command line:
    1. Click Start > Run.
    2. In the Open field, type cmd and press Enter. A command prompt window opens.
    3. In the command window, change the directory to your HIDS installation directory. By default, this is: C:\Program Files\symantec\Host IDS\bin
    4. At the command prompt, type iIDSAgent.exe -stop and press Enter.
    5. Close the command prompt window.

    From the Control Panel:
    1. Click Start > Settings > Control Panel.
    2. Click Administrative Tools.
    3. Click Services.
    4. Click Symantec Host IDS Agent.
    5. Click Action > Stop.
    6. Close the Control Panel.
    The Host IDS Agent on Solaris

      To start the Symantec HIDS Agent on Solaris:
      1. Log on as a user with super-user privileges.
      2. Type start /etc/init.d/iidsagentd and press Enter.
      To stop the Symantec HIDS Agent on Solaris:
      1. Log on as a user with super-user privileges.
      2. Type stop /etc/init.d/iidsagentd and press Enter.







    Legacy ID



    2002102312454453


    Article URL http://www.symantec.com/docs/TECH111720


    Terms of use for this information are found in Legal Notices