Snort mailing list archives
Snort and barnyard status
From: "Lance Boon" <lboon () firststatebanksw com>
Date: Thu, 4 Nov 2004 14:15:46 -0600
What I'm looking for is an easy for users other than myself (in particular my boss) to be able to look at a webpage and determine the status of a particular snort sensor if the snort and barnyard processes are running. I'm not sure of the best way to handle this right now what I do is just ssh to the box do a ps -ef|grep snort and see both barnyard and the snort processes running. What I would like to be able to do is automate this by either having my graphing server ssh to each box, do the ps -ef|grep snort, and get these results back then put these results in a webpage to view then, maybe even send an e-mail alert if a process isn't running when it should be, or even have something set to start that process if it isn't running. But right now my main focus is just to get the results back to the webpage to be displayed and have this run as a process every min or so. Any assistance or pointers in the right direction would greatly be appreciated.
Attachment:
smime.p7s
Description:
Current thread:
- Snort and barnyard status Lance Boon (Nov 04)
- Re: Snort and barnyard status Sean Brown (Nov 05)
- Re: Snort and barnyard status Jose Maria Lopez (Nov 06)
- <Possible follow-ups>
- RE: Snort and barnyard status Lance Boon (Nov 05)
- Re: Snort and barnyard status Sam Evans (Nov 05)
- Re: Snort and barnyard status Shawn Kottke (Nov 06)
- RE: Snort and barnyard status Basselgia, Barry A Mr (NAF Atsugi) (Nov 07)
- Snort and barnyard status TIannotti (Nov 08)