| Main Archive Page > Month Archives > snort-users archives |
Re: [Snort-users] Rules and sensor management
From: Tim Clarkson <timothyclarkson_at_nospam>Date: Wed Feb 10 2010 - 00:34:44 GMT
To: <pschmehl_lists@tx.rr.com>, <snort-users@lists.sourceforge.net>
I use Management software from Endace which is a commerical solution. They allow you to manage your own snort installation (custom built probe) but also provide hardware probes as well.
This is a commerical solution and not an open source solution, so I am not sure if this is what you are after.
If you want more information please feel free to email directly.
Regards
System Management Consulting Limited
Timothy Clarkson
Personal: Timothy.J.Clarkson@gmail.com
Snort List: TimothyClarkson@hotmail.com New Zealand
> Date: Tue, 9 Feb 2010 14:05:49 -0600
> From: pschmehl_lists@tx.rr.com
> To: snort-users@lists.sourceforge.net
> Subject: Re: [Snort-users] Rules and sensor management
>
> I will take the resounding thud in response to this question to mean that there
> are no other options out there.
>
> --On Monday, February 08, 2010 15:00:21 -0600 Paul Schmehl
> <pschmehl_lists@tx.rr.com> wrote:
>
> > I'm looking for something that can manage rules and conf files on multiple
> > sensors. I do *not* want something that automagically fetches the vrt rules
> > and uses oinkmaster to maintain the rules, because that's not what I'm doing
> > on these particular sensors.
> >
> > I looked at IDS Policy Manager, which looked promising (even though it's
> > written for Windows only), but the dang thing doesn't work. I can't browse
> > to my hard drive and load my existing rules, conf file and other files.
> >
> > It doesn't have to be a dumbed down GUI.
> >
> > Buehler????
>
>
>
> --
> Paul Schmehl, Senior Infosec Analyst
> As if it wasn't already obvious, my opinions
> are my own and not those of my employer.
> *******************************************
> "It is as useless to argue with those who have
> renounced the use of reason as to administer
> medication to the dead." Thomas Jefferson
>
>
> ------------------------------------------------------------------------------
> SOLARIS 10 is the OS for Data Centers - provides features such as DTrace,
> Predictive Self Healing and Award Winning ZFS. Get Solaris 10 NOW
> http://p.sf.net/sfu/solaris-dev2dev
> _______________________________________________
> Snort-users mailing list
> Snort-users@lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
Looking for a place to manage all your online stuff? Download the new Windows Live http://download.live.com
SOLARIS 10 is the OS for Data Centers - provides features such as DTrace, Predictive Self Healing and Award Winning ZFS. Get Solaris 10 NOW http://p.sf.net/sfu/solaris-dev2dev
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users