RE: Snort Monitoring

From: Chris Fairbourne (chris@camsystems.com)
Date: 10/29/02


From: Chris Fairbourne <chris@camsystems.com>
To: "'Scott M. Algatt'" <salgatt@turtleshell.net>
Date: Mon, 28 Oct 2002 16:59:48 -0800


> I am looking for something that will provide monitoring of snort for me.
> I have several remote installs of Snort 1.9 and need to find a way to
> monitor them to make sure they are operational.

DJ Bernstein's daemontools (supervise/svcscan) can monitor & restart yer
Snort daemon for ya.
http://cr.yp.to/daemontools/svscan.html
Perhaps a bit more elegant than something homebrew anyway.

Regards,
chris