KFSensor

Customize

Use the Customize dialog to alter a variety of user interface settings.

Alert

• Enable Alert Sound
  If checked then a sound is played when a new event is reported.
• Sound only when main window not shown
  If checked the alarm sound will not be played while you are viewing the main window.
• Flash icon on alert
  If checked then the KFSensor system tray icon will flash red and orange when a new event is reported.
• Alert timeout
  When a new event is reported the KFSensor system tray icon will continue to flash for this many seconds, before returning to a constant green. The flashing will only time out when the main window is displayed.

Window

• Hide window on Minimize
  If checked then the main window will be hidden completely and will not appear on the task bar. The main window can be accessed by clicking on the KFSensor system tray icon.
• Single click on System Tray restores window
  Controls whether a single or a double click is required to display the main window.

Activity Intervals

Events are color coded, depending on how recent they are. This color coding affects the event list and the port and visitor tree displays. This enables you to quickly identify where a new attack is occurring.
• Very recent alert interval
  An event will be coded red for this interval.
• Recent alert interval
  An event will be coded yellow for this interval.

Start up

• Start on boot up
  If checked then KFSensor Monitor will be started automatically when you log on.
  If the KFSensor server is installed as a system service then its start up options will not be affected by this setting. Instead this is done via the services dialog of the control panel.
• Load events from last X days
  When the monitor is started it will display old events from the number of days in the past specified using this setting.

Max Number Of Events To Keep Loaded

• Unload events in excess of
  The KFSensor monitor keeps all events in memory. As new events are recorded these are added to its list. Over a long period this may lead to all available memory being used up. This can be a problem if the system is left running for several days.
  This field sets the maximum number of events that will be kept in memory.
  Once per hour the monitor checks to see if the number of events exceeds the specified limit and if it does then it unloads enough events to bring it down to the limit. The oldest events are unloaded first.
  If this field is blank then no events will be unloaded.

KFSensor On-Line Manual Contents