Snort mailing list archives
Questions about Eagle X v2.0
From: "LucAdmin" <info () lucretia ca>
Date: Thu, 19 Jun 2003 10:51:56 -0600
Hi. Ok I tried this out and it's very nice, one of the fastest installs of Snort on a windows machine I've seen...except for some questions I have: - Are the config settings backed up? (Mysql, snort, php, etc) If yes, where are they backed up? If no, this would be a nice thing to centralize. (My guess is it simply overwrites them without consequence in the individual storage locations.) - It does not request an installation point, and dumped everything in my C:\ directory where I will have to move it. (This is a very bad design flaw, since some of us may want to install it redundantly for testing purposes) - Changes to IDSCenter, do not take permanent affect (IE: IP ADDRESS OF DYNAMIC HOST) which then causes silly errors in IDSCenter. (Page not found, host not found, etc.), this seems to be due to eagle config vs. snort config via idscenter. Should one rerun the eagle config? - It does not seem to understand what 'localhost' or 127.0.0.1 is. (Not sure about this one, could have been a server issue, but loopback did work) - How does one upgrade one application (IE: PHP) without uninstalling and reinstalling everything? Also Preprocessor2-ignorehosts does not seem to work (snort FATAL ERROR)....any idea's? At the very least the next version should ask you where you want to install =) Otherwise a great step forward in snort on windows tools, great work! James Friesen CIO Lucretia Enterprises info () lucretia ca -----Original Message----- From: snort-users-admin () lists sourceforge net [mailto:snort-users-admin () lists sourceforge net]On Behalf Of Ueli Kistler Sent: Monday, June 16, 2003 6:14 AM To: snort-users () lists sourceforge net; snort-announce () lists sourceforge net; Focus IDS Subject: [Snort-users] ANNOUNCEMENT: Eagle X v2.0 available on http://www.engagesecurity.com Hello Eagle X v2.0, a pre-configured IDS system for Windows platform, is out on http://www.engagesecurity.com. It includes free software and a configuration tool will help you to adapt it to your host/network environment very easily. Product page: http://www.engagesecurity.com/products/idscenter Download: http.//www.engagesecurity.com/downloads What's new compared to Eagle X 1 ? Snort 2.0 is used and PHP was updated to 4.3.2, IDScenter 1.1 RC3 is included also. Snort is still installed as Windows service and IDScenter is used to manage and configure it. Online update feature is activated by default using Oinkmaster from Andreas Östling. IDScenter 1.1 RC3 has now an threaded AlertMail function and can also send reports from the database server: you only have to provide the queries in your template mail message or use the standard SQL queries of IDScenter. The HTML output can also be generated locally to a file using a template. The viewer can be choosed of course (Internal log viewer / Standard browser / Other browser software). Software included (Credits are give online on http://www.engagesecurity/products/eaglex) Snort 2.01 Build 88 IDScenter 1.1 RC3 Apache 1.2.27 PHP 4.3.2 MySQL 3.23.55 ACID 0.9.6b23 JPGraph 1.9.1 Oinkmaster 0.8 Win32 (modificated, Original script by Andreas Östling) WinPCAP 3.0 final ---------------------------------------------------------------------------- --- Attend the Black Hat Briefings & Training, July 28 - 31 in Las Vegas, the world's premier technical IT security event! 10 tracks, 15 training sessions, 1,800 delegates from 30 nations including all of the top experts, from CSO's to "underground" security specialists. See for yourself what the buzz is about! Early-bird registration ends July 3. This event will sell out. www.blackhat.com ---------------------------------------------------------------------------- --- ------------------------------------------------------- This SF.Net email is sponsored by: INetU Attention Web Developers & Consultants: Become An INetU Hosting Partner. Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission! INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list ------------------------------------------------------- This SF.Net email is sponsored by: INetU Attention Web Developers & Consultants: Become An INetU Hosting Partner. Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission! INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- ANNOUNCEMENT: Eagle X v2.0 available on http://www.engagesecurity.com Ueli Kistler (Jun 16)
- Eagle X v2.0 cristal_ball (Jun 17)
- Re: Eagle X v2.0 Ueli Kistler (Jun 17)
- performance concern Francisco Morosini (Jun 17)
- Re: performance concern Erek Adams (Jun 17)
- Re: performance concern Matt Kettler (Jun 17)
- Re: Eagle X v2.0 Ueli Kistler (Jun 17)
- Eagle X v2.0 cristal_ball (Jun 17)
- Questions about Eagle X v2.0 LucAdmin (Jun 19)