IDS Agent will not start on HP-UX

Article:TECH199732  |  Created: 2012-11-14  |  Updated: 2012-11-15  |  Article URL http://www.symantec.com/docs/TECH199732
Article Type
Technical Solution


Issue



Symantec has discovered a defect in the SCSP agent on HP-UX systems where the IDS agent would fail to start.


Error



None


Environment



Who is impacted? - Anyone using IDS on HP-UX could possibly encounter this issue.

Affected Operating Systems: HP-UX

Affected Symantec Critical System Protection versions: All versions through 5.2 RU8 MP4 Hotfix 2. This issue was reported in 5.2.0.524.
 


Cause



The cause for this problem is the corruption of the FileWatch.dat file that is used by the IDS agent. FileWatch.dat is present under <SCSP_install_directory>/IDS/bin. The IDS agent fails to start successfully in case of a corrupt FileWatch.dat file and crashes.


Solution



The fix for this issue is available in the SCSP 5.2 RU9 release.
If a full upgrade is not possible, the SCSP 5.2 RU8 MP4 HF2 hotfix can be found here:
<link to the hotfix 2 page>
 
If the hotfix cannot be applied, there is a workaround that could solve the issue.
 
Workaround:
 
To prevent FileWatch.dat from reappearing and causing IDS to not start again, it is advised to add the following line to the sisidsagent startup script. This line will remove FileWatch.dat every time before starting IDS.
 
In <SCSP_install_directory>/IDS/bin/sisidsagent file, under start_idsagent():
Add
               rm -f FileWatch.*
              
after the line:
               cd $IDSAGENT_HOME
 
Removing the FileWatch.dat would only slightly affect IDS functionality.

 

The fix for this issue is available in the SCSP 5.2 RU9 release.

If a full upgrade is not possible, the SCSP 5.2 RU8 MP4 HF2 hotfix can be found here:

http://www.symantec.com/docs/TECH199783




Article URL http://www.symantec.com/docs/TECH199732


Terms of use for this information are found in Legal Notices