(no subject)

[Ken Bell <kbell () austin sl slb com>]

Hi Erick, Antonio

I use IDS Policy Manager from Activeworx http://www.activeworx.com/idspm/

It's a freebee, takes just a few minutes of getting used to. It lets you
graphically see what is there and use a windows interface to allow/disallow,
or write new rule sets. You actually keep a local copy of the rules, update
the rules over the network, modify or write new ones, then up load to the
system over SSH or FTP.

Best regards,

Ken Bell




Date: Wed, 26 Mar 2003 09:55:46 -0800
From: Erick Mechler <emechler () techometer net>
To: ANTONIO GUTIERREZ <ANTONIO.GUTIERREZ () farmersbranch info>
Cc: snort-users () lists sourceforge net
Subject: Re: [Snort-users] Auto Update on Rules

:: I"m running Snort 1.9.1 on a Windows 2000, using ACID & PHP. I don't
:: know how to write a simple CRON job. is there any thing else.

Hm, not sure about Windows...  You could still write a batch file and make
it a scheduled job, but I've never used it myself.


--__--__--

Message: 2
From: "Michael Steele" <michaels () silicondefense com>
To: "'ANTONIO GUTIERREZ'" <ANTONIO.GUTIERREZ () farmersbranch info>
Cc: <snort-users () lists sourceforge net>
Subject: RE: [Snort-users] Auto Update on Rules
Date: Wed, 26 Mar 2003 10:12:56 -0800

ANTONIO,

Why would you really want to do this? Take 10 minutes and manually do
this task once a week. There are a lot of drawbacks to doing this and
the one big draw back it that you are never really sure if it's
happened, or happened correctly.

This can be done correctly but I've never seen anything in the groups
that I would want to stake my internal network on.

-Michael
--
 Michael Steele | System Engineer / Support Technician
 mailto:michaels () silicondefense com
 Silicon Defense - The Cyber-War Defense Company
 Website: http://www.silicondefense.com
 Snort: Open Source Network IDS - http://www.snort.org

-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net] On Behalf Of Erick
Mechler
Sent: Wednesday, March 26, 2003 9:32 AM
To: ANTONIO GUTIERREZ
Cc: snort-users () lists sourceforge net
Subject: Re: [Snort-users] Auto Update on Rules

:: is there a way to auto update the rules and snort.conf file?

Ken Bell
Schlumberger Limited
Information Security
--------------------
Classification: Schlumberger Private



-------------------------------------------------------
This SF.net email is sponsored by:
The Definitive IT and Networking Event. Be There!
NetWorld+Interop Las Vegas 2003 -- Register today!
http://ads.sourceforge.net/cgi-bin/redirect.pl?keyn0001en
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users