11.639 192.168.100.2 224.0.0.2 Hello (state Active) 14.580 192.168.100.2 224.0.0.2 Hello (state Active) 17.437 192.168.100.2 224.0.0.2 Hello (state Active) 20.358 192.168.100.2 224.0.0.2 Hello (state Active) 23.287 192.168.100.2 224.0.0.2 Hello (state Active) 26.285 192.168.100.2 224.0.0.2 Hello (state Active) Packet Number 1 - Time: May 8. 2006 03:23:55.126 - Packet Length: 70 bytes - Capture Length: 70 bytes Ethernet II, Src: 00:00:0c:07:ac:00 Dst 01:00:5e:00:00:02 802.1 a Virtual LAN Internet Protocol, Src Addr: 192.168.100.2 (192.168.100.2). Dst Addr: 224.0.0.2 (224.0.0.2) User Datagram Protocol Src Port 1985 (1985). Dst Port 1985 (1985) Cisco Hot Standby Router Protocol Version: 0 Op Code: Hello (0) State: Active (16) Hellotime: Default (3) Holdtime: Default (10) 0000 01 00 Se 00 00 02 00 00 Oc 07 ac 00 81 00 c0 32 64 01 0e la cf 82 Close Applet decoder started Adblock Figure 17-7. Network Analysis Module packet capture detail Intrusion Detection System Modules. Intrusion detection functionality can be added to the 6500-series chassis with the introduction of an IDSM. These modules are actu- ally preconfigured Linux servers that reside on a blade. They act like IDS appliances, but have the added ability of sampling data streams at wire speed because they connected to the crossbar fabric bus. Chapter 17: Cisco 6500 Multilayer Switches These modules can be managed through an onboard secure web interface, which is shown in Figure 17-8, though Cisco recommends that they be managed through another application such as VPN/Security Management Solution (VMS), Cisco Secu- rity Manager, or Cisco Security Monitoring, Analysis, and Response System (MARS). Cisco Systems IDS Device Manager Microsoft Internet Explorer Favorites Tools Search Favorites Media Address d/10.10.10.134/cgi-bin/idm?myAreald=28mySubAreald=1&myTocAreaId=1 Links Cisco SYSTEMS Logout Help I NSDB I About IDS Device Manager Device Configuration Monitoring Administration User: cisco (admin) Sensing Engine Blocking Auto Update Restore Defaults You Are Her