RE: Snort Monitoring

["Matt Foster" <matt.foster () blade-software com>]

Scott, 

You could always test them with IDS Informer, www.blade-software.com

Regards
Matt

_____________________________________
Matt Foster
Blade-Software Inc.
www.blade-software.com
Security Verification Management Solutions
______________________________________



-----Original Message-----
From: Chris Fairbourne [mailto:chris () camsystems com]
Sent: 29 October 2002 01:00
To: 'Scott M. Algatt'
Cc: 'focus-ids () securityfocus com'
Subject: RE: Snort Monitoring


> I am looking for something that will provide monitoring of snort for me.
> I have several remote installs of Snort 1.9 and need to find a way to
> monitor them to make sure they are operational.


DJ Bernstein's daemontools (supervise/svcscan) can monitor & restart yer
Snort daemon for ya.
http://cr.yp.to/daemontools/svscan.html
Perhaps a bit more elegant than something homebrew anyway.


Regards,
chris