You Are Here : Forums Sunday, September 07, 2008
     
Activeworx.org Forums
 
  Forum  IDS Policy Mana...  IDS Policy Mana...  Searching for a rule
Previous Previous
 
Next Next
New Post 11/5/2007 7:47 PM
  paulr
21 posts
9th Level Poster


Searching for a rule 
Hi,

I can't seem to make the search function work. I recall showing someone how to do this and how it popped up the rules...at least I'm pretty sure I do. I was using StillSecure Strata Guard recently too and it has a search...anyway...

I now have 2.2.0.20 and have two issues.

(1) I thought (uninstalled now) the previous version I could do a simple search and get rules. So, if I wanted to disable a frequent false positive I'd just search and change it. Now I get a more complicated search box with operators that no matter how I enter the rules I can't get any results. For example, if I search for 'telnet traffic' various ways like = or ~ or whatever I get nothing.

(2) When I enter it just right instead of getting nothing the search dialog makes it slowly to 90% and then hangs. Bug?

Anyway...either I don't remember correctly and it didn't work so simply before or it's changed...

I just want a simple way to search for things like the following: (ftp_telnet) Telnet traffic encrypted but can't seem to do it with the search function...

What am I missing?

Thanks!
 
New Post 11/6/2007 2:45 AM
  Jeff Dell
233 posts
www.activeworx.com
1st Level Poster


Re: Searching for a rule 
ok.. first let me talk about the new search because it is not very well documented.

= is an exact search
~ is the text you type exists anywhere in the field.

so if you have a search

Rule Name ~ Telnet

1. If will search for the word telnet (non-case sensitive) anywhere in the rule name. I did a search for "Rule Name~telnet" and had no problem. I got lots of hits. but when I search for "Rule Name~telnet traffic" I got zero hits because no rule has the text "telnet traffic" in the name.

2. About how many rules do you have? and what was the query? The query could have got back so many rows that it was taking a minute or 2 to load all the rules. In fact I just did a search myself that did this with 10 policies in IDSPM and it took a couple of minutes to get the results back. If you click Cancel it will quit the query and you can try something else.

Cheers,
Jeff

 
New Post 11/6/2007 10:10 PM
  paulr
21 posts
9th Level Poster


Re: Searching for a rule 
Bummer. Good news is I got the search to work. Bad news is I apparently can't edit any of the results and the program crashed shortly after...here is the result of trying to edit the rule found in search:


See the end of this message for details on invoking
just-in-time (JIT) debugging instead of this dialog box.

************** Exception Text **************
System.Threading.ThreadStateException: ActiveX control '8856f961-340a-11d0-a96b-00c04fd705a2' cannot be instantiated because the current thread is not in a single-threaded apartment.
at System.Windows.Forms.WebBrowserBase..ctor(String clsidString)
at System.Windows.Forms.WebBrowser..ctor()
at idspm.forms.Policies.frmRule.֘()
at idspm.forms.Policies.frmRule..ctor()
at idspm.forms.Misc.frmAddGrid.܎(Object ֚, DoubleClickRowEventArgs ֛)
at Infragistics.Win.UltraWinGrid.UltraGrid.OnDoubleClickRow(DoubleClickRowEventArgs e)
at Infragistics.Win.UltraWinGrid.UltraGrid.FireEvent(GridEventIds id, EventArgs e)
at Infragistics.Win.UltraWinGrid.GridCellEmbeddableEditorOwnerInfoBase.OnEditorDoubleClick(EmbeddableUIElementBase embeddableElem, EmbeddableClickEventArgs e)
at Infragistics.Win.EmbeddableUIElementBase.RaiseDoubleClickEvent(UIElement sender, Boolean isButton)
at Infragistics.Win.EmbeddableUIElementBase.OnDoubleClick(Boolean adjustableArea)
at Infragistics.Win.UIElement.OnDoubleClick(Boolean adjustableArea)
at Infragistics.Win.ControlUIElementBase.ProcessDoubleClick(Object sender, EventArgs e)
at Infragistics.Win.Utilities.ProcessEvent(Control control, ProcessEvent eventToProcess, EventArgs e)
at Infragistics.Win.UltraControlBase.OnDoubleClick(EventArgs e)
at System.Windows.Forms.Control.WmMouseUp(Message& m, MouseButtons button, Int32 clicks)
at System.Windows.Forms.Control.WndProc(Message& m)
at System.Windows.Forms.Control.ControlNativeWindow.OnMessage(Message& m)
at System.Windows.Forms.Control.ControlNativeWindow.WndProc(Message& m)
at System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr wparam, IntPtr lparam)


************** Loaded Assemblies **************
mscorlib
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.832 (QFE.050727-8300)
CodeBase: file:///C:/WINDOWS/Microsoft.NET/Framework/v2.0.50727/mscorlib.dll
----------------------------------------
IDSPM
Assembly Version: 2.2.0.20
Win32 Version: 2.2.0.20
CodeBase: file:///C:/Program%20Files/Activeworx/IDS%20Policy%20Manager/IDSPM.exe
----------------------------------------
System.Windows.Forms
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.832 (QFE.050727-8300)
CodeBase: file:///C:/WINDOWS/assembly/GAC_MSIL/System.Windows.Forms/2.0.0.0__b77a5c561934e089/System.Windows.Forms.dll
----------------------------------------
System
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.832 (QFE.050727-8300)
CodeBase: file:///C:/WINDOWS/assembly/GAC_MSIL/System/2.0.0.0__b77a5c561934e089/System.dll
----------------------------------------
System.Drawing
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.832 (QFE.050727-8300)
CodeBase: file:///C:/WINDOWS/assembly/GAC_MSIL/System.Drawing/2.0.0.0__b03f5f7f11d50a3a/System.Drawing.dll
----------------------------------------
IDSPMLib
Assembly Version: 2.2.0.0
Win32 Version: 2.2.0.20
CodeBase: file:///C:/Program%20Files/Activeworx/IDS%20Policy%20Manager/IDSPMLib.DLL
----------------------------------------
FirebirdSql.Data.FirebirdClient
Assembly Version: 2.0.0.0
Win32 Version: 2.0.0.0
CodeBase: file:///C:/Program%20Files/Activeworx/IDS%20Policy%20Manager/FirebirdSql.Data.FirebirdClient.DLL
----------------------------------------
System.Data
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.832 (QFE.050727-8300)
CodeBase: file:///C:/WINDOWS/assembly/GAC_32/System.Data/2.0.0.0__b77a5c561934e089/System.Data.dll
----------------------------------------
Infragistics2.Win.UltraWinToolbars.v7.2
Assembly Version: 7.2.20072.61
Win32 Version: 7.2.20072.61
CodeBase: file:///C:/Program%20Files/Activeworx/IDS%20Policy%20Manager/Infragistics2.Win.UltraWinToolbars.v7.2.DLL
----------------------------------------
Infragistics2.Win.v7.2
Assembly Version: 7.2.20072.61
Win32 Version: 7.2.20072.61
CodeBase: file:///C:/Program%20Files/Activeworx/IDS%20Policy%20Manager/Infragistics2.Win.v7.2.DLL
----------------------------------------
Infragistics2.Shared.v7.2
Assembly Version: 7.2.20072.61
Win32 Version: 7.2.20072.61
CodeBase: file:///C:/Program%20Files/Activeworx/IDS%20Policy%20Manager/Infragistics2.Shared.v7.2.DLL
----------------------------------------
Infragistics2.Win.UltraWinTabbedMdi.v7.2
Assembly Version: 7.2.20072.61
Win32 Version: 7.2.20072.61
CodeBase: file:///C:/Program%20Files/Activeworx/IDS%20Policy%20Manager/Infragistics2.Win.UltraWinTabbedMdi.v7.2.DLL
----------------------------------------
System.Design
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.832 (QFE.050727-8300)
CodeBase: file:///C:/WINDOWS/assembly/GAC_MSIL/System.Design/2.0.0.0__b03f5f7f11d50a3a/System.Design.dll
----------------------------------------
Infragistics2.Win.UltraWinStatusBar.v7.2
Assembly Version: 7.2.20072.61
Win32 Version: 7.2.20072.61
CodeBase: file:///C:/Program%20Files/Activeworx/IDS%20Policy%20Manager/Infragistics2.Win.UltraWinStatusBar.v7.2.DLL
----------------------------------------
Infragistics2.Win.UltraWinTree.v7.2
Assembly Version: 7.2.20072.61
Win32 Version: 7.2.20072.61
CodeBase: file:///C:/Program%20Files/Activeworx/IDS%20Policy%20Manager/Infragistics2.Win.UltraWinTree.v7.2.DLL
----------------------------------------
Infragistics2.Win.UltraWinDock.v7.2
Assembly Version: 7.2.20072.61
Win32 Version: 7.2.20072.61
CodeBase: file:///C:/Program%20Files/Activeworx/IDS%20Policy%20Manager/Infragistics2.Win.UltraWinDock.v7.2.DLL
----------------------------------------
Infragistics2.Win.UltraWinGrid.v7.2
Assembly Version: 7.2.20072.61
Win32 Version: 7.2.20072.61
CodeBase: file:///C:/Program%20Files/Activeworx/IDS%20Policy%20Manager/Infragistics2.Win.UltraWinGrid.v7.2.DLL
----------------------------------------
System.Xml
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.832 (QFE.050727-8300)
CodeBase: file:///C:/WINDOWS/assembly/GAC_MSIL/System.Xml/2.0.0.0__b77a5c561934e089/System.Xml.dll
----------------------------------------
System.Deployment
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.832 (QFE.050727-8300)
CodeBase: file:///C:/WINDOWS/assembly/GAC_MSIL/System.Deployment/2.0.0.0__b03f5f7f11d50a3a/System.Deployment.dll
----------------------------------------
Infragistics2.Win.UltraWinEditors.v7.2
Assembly Version: 7.2.20072.61
Win32 Version: 7.2.20072.61
CodeBase: file:///C:/Program%20Files/Activeworx/IDS%20Policy%20Manager/Infragistics2.Win.UltraWinEditors.v7.2.DLL
----------------------------------------
nsoftware.IPWorks
Assembly Version: 6.1.2473.0
Win32 Version: 6.1.2473.0
CodeBase: file:///C:/Program%20Files/Activeworx/IDS%20Policy%20Manager/nsoftware.IPWorks.DLL
----------------------------------------
Infragistics2.Win.Misc.v7.2
Assembly Version: 7.2.20072.61
Win32 Version: 7.2.20072.61
CodeBase: file:///C:/Program%20Files/Activeworx/IDS%20Policy%20Manager/Infragistics2.Win.Misc.v7.2.DLL
----------------------------------------
System.Configuration
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.832 (QFE.050727-8300)
CodeBase: file:///C:/WINDOWS/assembly/GAC_MSIL/System.Configuration/2.0.0.0__b03f5f7f11d50a3a/System.Configuration.dll
----------------------------------------
System.Web
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.832 (QFE.050727-8300)
CodeBase: file:///C:/WINDOWS/assembly/GAC_32/System.Web/2.0.0.0__b03f5f7f11d50a3a/System.Web.dll
----------------------------------------
Accessibility
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.42 (RTM.050727-4200)
CodeBase: file:///C:/WINDOWS/assembly/GAC_MSIL/Accessibility/2.0.0.0__b03f5f7f11d50a3a/Accessibility.dll
----------------------------------------
Infragistics2.Win.UltraWinTabControl.v7.2
Assembly Version: 7.2.20072.61
Win32 Version: 7.2.20072.61
CodeBase: file:///C:/Program%20Files/Activeworx/IDS%20Policy%20Manager/Infragistics2.Win.UltraWinTabControl.v7.2.DLL
----------------------------------------
Infragistics2.Win.UltraWinExplorerBar.v7.2
Assembly Version: 7.2.20072.61
Win32 Version: 7.2.20072.61
CodeBase: file:///C:/Program%20Files/Activeworx/IDS%20Policy%20Manager/Infragistics2.Win.UltraWinExplorerBar.v7.2.DLL
----------------------------------------
nsoftware.IPWorksZip
Assembly Version: 7.2.2473.0
Win32 Version: 7.2.2473.0
CodeBase: file:///C:/Program%20Files/Activeworx/IDS%20Policy%20Manager/nsoftware.IPWorksZip.DLL
----------------------------------------
nsoftware.IPWorksSSH
Assembly Version: 7.1.2473.0
Win32 Version: 7.1.2473.0
CodeBase: file:///C:/Program%20Files/Activeworx/IDS%20Policy%20Manager/nsoftware.IPWorksSSH.DLL
----------------------------------------
Microsoft.VisualBasic
Assembly Version: 8.0.0.0
Win32 Version: 8.0.50727.42 (RTM.050727-4200)
CodeBase: file:///C:/WINDOWS/assembly/GAC_MSIL/Microsoft.VisualBasic/8.0.0.0__b03f5f7f11d50a3a/Microsoft.VisualBasic.dll
----------------------------------------
Infragistics2.Win.UltraWinListView.v7.2
Assembly Version: 7.2.20072.61
Win32 Version: 7.2.20072.61
CodeBase: file:///C:/Program%20Files/Activeworx/IDS%20Policy%20Manager/Infragistics2.Win.UltraWinListView.v7.2.DLL
----------------------------------------

************** JIT Debugging **************
To enable just-in-time (JIT) debugging, the .config file for this
application or computer (machine.config) must have the
jitDebugging value set in the system.windows.forms section.
The application must also be compiled with debugging
enabled.

For example:





When JIT debugging is enabled, any unhandled exception
will be sent to the JIT debugger registered on the computer
rather than be handled by this dialog box.


 
New Post 11/6/2007 11:31 PM
  Jeff Dell
233 posts
www.activeworx.com
1st Level Poster


Re: Searching for a rule 
Thanks for this debug log. It looks like there is a threading issue. I am working on a new build that will be out by the end of the week that will fix this and a couple other little problems.

Cheers,
Jeff
 
New Post 11/7/2007 3:31 AM
  Jeff Dell
233 posts
www.activeworx.com
1st Level Poster


Re: Searching for a rule 
This has been fixed in build 21 which will be out later this week. sorry for the troubles.

Jeff
 
New Post 11/9/2007 1:59 PM
  Jeff Dell
233 posts
www.activeworx.com
1st Level Poster


Re: Searching for a rule 

A new build was just put online that fixes this problem.

 

Cheers,

Jeff

 
Previous Previous
 
Next Next
  Forum  IDS Policy Mana...  IDS Policy Mana...  Searching for a rule
 
 
Copyright 2000-2007 by Activeworx, Inc.
All trademarks and copyrights on this page are owned by their respective owners.