IDS: RE: Snort Monitoring

From: Matt Foster <matt.foster_at_blade-software.com>
Date: Mon, 2 Dec 2002 01:18:24 -0000

Scott,

You could always test them with IDS Informer, www.blade-software.com

Regards
Matt

_____________________________________
Matt Foster
Blade-Software Inc.
www.blade-software.com
Security Verification Management Solutions
______________________________________

-----Original Message-----
From: Chris Fairbourne [mailto:chris_at_camsystems.com]
Sent: 29 October 2002 01:00
To: 'Scott M. Algatt'
Cc: 'focus-ids_at_securityfocus.com'
Subject: RE: Snort Monitoring

> I am looking for something that will provide monitoring of snort for me.
> I have several remote installs of Snort 1.9 and need to find a way to
> monitor them to make sure they are operational.

DJ Bernstein's daemontools (supervise/svcscan) can monitor & restart yer
Snort daemon for ya.
http://cr.yp.to/daemontools/svscan.html
Perhaps a bit more elegant than something homebrew anyway.

Regards,
chris
Received on Dec 02 2002