Sniffer Reporter

[DTMan]

When trying to add multiple agents in the console area, I receive the error "the interface card already exists - please choose another one". According to NAI, there is a workaround of deleting the file key.ini on the agent machine (i.e. DSS). I have been able to complete this task and add the second agent but am not able to capture any reporting data from that unit. I know there is data, but it shows no data available. Any suggestions?

Also, does anyone know of any way to run a script or schedule report to happen at a certain time in the day? Maybe this is covered in the Sniffer or DSS Watch?

Any thoughts?

 

[pay]

Early 4.0 versions like 4.0.08 there were problems with reporting, if there were more than one monitor card in same physical Agent. There are some workarounds, yes, but newest 4.1 version has fixed quite a lot reporting issues. So, my recommendation is that try 4.1 in one machine.
DSSRMON Watch is product which does scheduled reports up to 20 Agents.

pasi

 

[alail]

Cause of this problem:
There are Multiple Agents that are Turn Key DSPro Agents and all have the same type of Ethernet Adapters which when imaged the Agent Key used to identify the Adapter all used the same Key Identifier in the Key.ini file. So when you try and add another Agent into the DSPro Reporter Console Agents list you get an error stating that that adapter already exist and it will not allow you to continue. By this Key identifier being unique and imaged on all of the DSPro’s with Ethernet Adapters any duplicate entries of that card in the Reporter Console will Generate an error stating that that adapter already exist, because it sees the same Key Identifier number on the other Agents as the same.

Solution:
The fix for this is to Connect directly to the Agent, either through Monitor and Key Board or through RD32 and open the Windows NT Explorer and Navigate to the C:\Program Files\Nai\DsproAgentNT\Program\(Adapter Name) Normally Network Associates, Inc. NAI21140/UC_2 Delete the entire Directory under that Adapter on the Agent. Note not all Folders will be deleted but the one to make the fix work will.

Close the Windows Explorer window and open the Control Panel and open the Services ICON. Find the Services for the DSAgentSRV and Stop and the restart the services. Close the Control Panel.

Go back to the system running the DSPro Console and either add the Agent or if it is already added right click on the Agent in the Sniffview Window and take it all the way through the Get Card list to repopulate the Adapters.

Select the appropriate adapter and then Connect to the Agent through the SniffView Window and start a capture and then Stop and Display. This Regenerates the Directory for the card previously deleted and will create a new Key.ini file with a specific Key identifier for just that adapter and then launch the reporter utility and add it to the Agents list. It will now allow you to add the additional agent to the Reporter Utility. This must be done to every Agent that is of the same Model Type that has the same type of Adapter installed if they were Turn Key Agents.

 

[netyan]

I had installed DSPro Agent 4.1(LAN) with my windows2000 pro OS. But,after dspro agent has been startup,Occur the error : No adapter is open!Why?

 

[NetworkUptime]

(This doesn't seem like the right thread for this question, but I'll give it a shot anyway)

netyan -

The Sniffer Distributed Agent is designed to run in Windows NT 4.0. It is not supported (and doesn't work, as you've seen) in Windows 2000.