Overview

The Intrusion Detection Services policy is installed into the stack by the Policy Agent (PAGENT). After the policy is installed, IDS detects, processes, and reports on events as requested by the policy. TRMD, part of IDS, handles reporting IDS statistics and events to syslogd. Problems might occur in the following areas:

• Policy installation
• Output to syslogd, the console, or the IDS trace missing or volume too high
• TRMD initialization