Re: Snort Monitoring

From: Tony Scalzitti (tony@scalzitti.org)
Date: 10/29/02


From: "Tony Scalzitti" <tony@scalzitti.org>
To: "Benjamin Keller" <benjamin@conceptis.com>
Date: Tue, 29 Oct 2002 17:40:40 -0500

Yes demarc is nice, however it is not under GPL and has a high cost to it.

I just think that should be noted, as it does not exactly fit the Snort
mindset.

-T

----- Original Message -----
From: "Benjamin Keller" <benjamin@conceptis.com>
To: "Scott M. Algatt" <salgatt@turtleshell.net>
Cc: <focus-ids@securityfocus.com>
Sent: Monday, October 28, 2002 12:52 PM
Subject: Re: Snort Monitoring

> By far the best solution:
>
> http://www.demarc.com/products/puresecure/
>
> Hope it helps,
>
> Benjamin Keller
> Systems Administrator
> Conceptis Technologies
>
> On Mon, 28 Oct 2002, Scott M. Algatt wrote:
>
> > All,
> >
> > I am looking for something that will provide monitoring of snort for me.
> > I have several remote installs of Snort 1.9 and need to find a way to
> > monitor them to make sure they are operational.
> >
> >
> > Regards,
> >
> > Scott M. Algatt
> >
> > Behold the turtle. He makes progress only when he sticks his neck out.
> >
> >
>



Relevant Pages

  • RE: SNORT + Win32
    ... For monitoring I use BASE http://secureideas.sourceforge.net/ it is based on the ACID code but is so much nice and faster ... I'm using SNORT and Win32 - so far so good. ... Any unauthorized disclosure, dissemination, use or reproduction is strictly prohibited. ...
    (Focus-IDS)
  • Re: Info HIDS
    ... Snort will provide the kind of monitoring you are asking about. ... be configured to monitor an entire network, and output logs in tcp dump, ... >configure an HIDS (tripwire) to get intrusion's information about a Web ...
    (Security-Basics)
  • Re: Network Traffic Analyzer Recommendations?
    ... Also available for use with snort are various plugins which enable you ... If you're just after a basic bandwidth monitoring tool, ... worse than using the built-in Windows performance monitoring tools - ...
    (microsoft.public.windows.server.networking)
  • RE: Snort Monitoring
    ... is very easily to use and there are numerous walkthroughs / howtos available ... > I am looking for something that will provide monitoring of snort for me. ...
    (Focus-IDS)
  • Re: Snort Monitoring
    ... can you use SNMP? ... I would think you are looking at monitoring of alerts and not the snort ... Subject: Snort Monitoring ... He makes progress only when he sticks his neck out. ...
    (Focus-IDS)