WiSentry Customization

• WiSentry Control Server parameters are contained in wisentry.txt
• WiSentry Agent Parameters are contained in emr.ini

WiSentry Control Server Options

If the wisentry.txt file does not exist, it can be created.

• EMC Loglevel=V
  Control Server event logging level
  V=verbose, BLANK=normal
  Default: BLANK (single space)
• EMC Cleanup Interval=n
  Control Server database cleanup interval
  Default: 600 seconds
• EMC Agent Timer=n
  Agent event timer
  Default: 15 seconds
• Journal=yes|no
  Enable journaling
  Default: yes

WiSentry Agent Options

If the emr.ini file does not exist, it can be created.

• Wired Network Adapter=n
  Changes the network adapter the remote agent uses.
  Default: 0
• EMR Loglevel=V|D
  Remote Agent event logging level.
  V=verbose, D=debug, BLANK=normal.
  Default: BLANK (single space)
• EMR SNMP Timer=n
  SNMP Probe timer.
  Default: 60.0 seconds
• VLAN Mode=yes/no
  Enables VLAN Mode
  Default: no
• Include VLAN=n
  Monitor the specified VLAN.
  Note: More then one VLAN can be specified by adding additional “Include VLAN=” statements. Also, if this option is specified, only the included VLANs will be monitored.
• Exclude VLAN=n
  Exclude the specified VLAN.
  Note: More then one VLAN can be specified by adding additional “Enclude VLAN=” statements.
• Community Name=name
  Adds a community name to be used for SNMP probes. The "public" community name is always used. This option add additional community names to use when using SNMP probing. Use additional entries to add more than one community name.
• Management VLAN=n
  Specifies the management VLAN. If this option is present, the WiSentry Agent will only send SNMP switch queries to the specified VLAN. By default, these queries are sent to all VLANs.
• ARP Factor=n
  Specifies the timing metric in seconds to use when performing ARP scans. ARP scans are performed on a random basis centered around the timing metric. For example, an ARP Factor of 5 would specify that ARP scan be performed with timing typically in the range of 2 to 8 seconds. Use an ARP Factor of 0 to disable ARP scanning.
• TCP SYN Timer=n
  Specifies the timing metric in seconds to use when performing TCP SYN probes. By default, this is 1 second. 
• Scan Subnet=n.n.n.0
  Specifies an additional subnet to include in an ARP scan. Make sure that the subnet is included in the netmask of the Agent. Add additional entries to include more than one subnet. For example, to manually include the 192.168.11.n subnet, use a Scan Subnet=192.168.11.0 entry.

Top