Guest User!

You are not Sophos Staff.

Thread Info
  • State Suggested Answer
  • +3 person also asked this people also asked this
  • Locked Locked
  • Replies 15 replies
  • Answers 1 answer
  • Subscribers 11 subscribers
  • Views 34349 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Stas started, and connection test success, but no user showing in live users/advance

TingYu

stas start = ok

connection test to utm, and between agent and collector = ok

VMI test = ok

but when I go to advance/view live users, it shows blank

My server is window 2003 domain.

Please help. thanks in advance.



This thread was automatically locked due to age.
Parents
  • 0

    Hi, thanks for reply.

    I tried to logoff and logon on stations, there is nothing on port 6677, but there is something on port 6060 instead, here is captured data.

    I did change stas collector setting to port 6060 in UTM, and in collector stas program on server, still does not have anything shown in live user/advance, nothing at global/client authentication/utm. Please advise. thanks.

    utm:/home/login # tcpdump -veni eth0 port 6060
    tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size 65535 byte s
    07:57:47.187326 00:09:6b:09:95:d8 > 00:e0:4c:77:14:39, ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 128, id 10740, offset 0, flags [none], proto UDP (17), length 39)
    192.168.0.13.4740 > 192.168.0.5.6060: UDP, length 11
    07:58:17.187257 00:09:6b:09:95:d8 > 00:e0:4c:77:14:39, ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 128, id 28749, offset 0, flags [none], proto UDP (17), length 39)
    192.168.0.13.4740 > 192.168.0.5.6060: UDP, length 11
    07:58:47.187173 00:09:6b:09:95:d8 > 00:e0:4c:77:14:39, ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 128, id 28815, offset 0, flags [none], proto UDP (17), length 39)
    192.168.0.13.4740 > 192.168.0.5.6060: UDP, length 11
    07:59:17.187073 00:09:6b:09:95:d8 > 00:e0:4c:77:14:39, ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 128, id 28876, offset 0, flags [none], proto UDP (17 ), length 39)
    192.168.0.13.4740 > 192.168.0.5.6060: UDP, length 11
    07:59:47.186941 00:09:6b:09:95:d8 > 00:e0:4c:77:14:39, ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 128, id 1459, offset 0, flags [none], proto UDP (17) , length 39)
    192.168.0.13.4740 > 192.168.0.5.6060: UDP, length 11
    08:00:17.186956 00:09:6b:09:95:d8 > 00:e0:4c:77:14:39, ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 128, id 2079, offset 0, flags [none], proto UDP (17) , length 39)
    192.168.0.13.4740 > 192.168.0.5.6060: UDP, length 11

  • 0 in reply to TingYu

    Hi,

    Please configure STAS collector port to 6677 UDP. Take a tcpdump on port 6677 and let me know if you find something. Again, are the user's authenticated? Do you find any live users on the STAS client?

    Thanks

    Sachin Gurung
    Team Lead | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  |  Video tutorials
    Remember to like a post.  If a post (on a question thread) solves your question use the 'This helped me' link.

Reply Children
No Data
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?

Unfiltered HTML