Snort mailing list archives
Re: Rules and sensor management
From: Tim Clarkson <timothyclarkson () hotmail com>
Date: Wed, 10 Feb 2010 13:34:44 +1300
I use Management software from Endace which is a commerical solution. They allow you to manage your own snort installation (custom built probe) but also provide hardware probes as well. This is a commerical solution and not an open source solution, so I am not sure if this is what you are after. If you want more information please feel free to email directly. Regards ------------------------------------------ System Management Consulting Limited Timothy Clarkson Personal: Timothy.J.Clarkson () gmail com Snort List: TimothyClarkson () hotmail com New Zealand ------------------------------------------
Date: Tue, 9 Feb 2010 14:05:49 -0600 From: pschmehl_lists () tx rr com To: snort-users () lists sourceforge net Subject: Re: [Snort-users] Rules and sensor management I will take the resounding thud in response to this question to mean that there are no other options out there. --On Monday, February 08, 2010 15:00:21 -0600 Paul Schmehl <pschmehl_lists () tx rr com> wrote:I'm looking for something that can manage rules and conf files on multiple sensors. I do *not* want something that automagically fetches the vrt rules and uses oinkmaster to maintain the rules, because that's not what I'm doing on these particular sensors. I looked at IDS Policy Manager, which looked promising (even though it's written for Windows only), but the dang thing doesn't work. I can't browse to my hard drive and load my existing rules, conf file and other files. It doesn't have to be a dumbed down GUI. Buehler????-- Paul Schmehl, Senior Infosec Analyst As if it wasn't already obvious, my opinions are my own and not those of my employer. ******************************************* "It is as useless to argue with those who have renounced the use of reason as to administer medication to the dead." Thomas Jefferson ------------------------------------------------------------------------------ SOLARIS 10 is the OS for Data Centers - provides features such as DTrace, Predictive Self Healing and Award Winning ZFS. Get Solaris 10 NOW http://p.sf.net/sfu/solaris-dev2dev _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
_________________________________________________________________ Looking for a place to manage all your online stuff? Download the new Windows Live http://download.live.com
------------------------------------------------------------------------------ SOLARIS 10 is the OS for Data Centers - provides features such as DTrace, Predictive Self Healing and Award Winning ZFS. Get Solaris 10 NOW http://p.sf.net/sfu/solaris-dev2dev
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Rules and sensor management Paul Schmehl (Feb 08)
- Re: Rules and sensor management Nigel Houghton (Feb 08)
- Re: Rules and sensor management Paul Schmehl (Feb 09)
- Re: Rules and sensor management Tim Clarkson (Feb 09)