Intrusion Detection Systems: Re: IDS & SNMP

From: Allen Leibowitz <allen_at_anzen.com>
Date: Fri, 19 May 2000 12:37:33 -0400

Archive: http://msgs.securepoint.com/ids
FAQ: http://www.ticm.com/kb/faq/idsfaq.html
IDS: http://www-rnks.informatik.tu-cottbus.de/~sobirey/ids.html
UNSUBSCRIBE: email "unsubscribe ids" to majordomo_at_uow.edu.au
At 08:24 PM 5/17/00 +0100, Nuno Miguel Neves wrote:
>Does anyone knows of an IDS that uses SNMP to communicate betweem the
>sensors and the manager?

> nneves_at_di.fc.ul.pt Dept. Informatica, Fac. Ciencias,
>|\ | |\ | Tel: +351 21 7500058 Univ. Lisboa, Bloco C5, Campo Grande
>| \|uno | \|eves Fax: +351 21 7500084 1700 Lisboa, Portugal

Nuno, do you have specific expectations for SNMP communication?
That is, do you want the manager to configure the sensors via SNMP?

Do you want the sensors to send "alerts" up to the manager via SNMP?

Do you want sensors to be able to send SNMP traps to specific hosts
(via specific MIBS) or do you want to send a generic message?

Allen Leibowitz <allen@anzen.com> http://www.anzen.com
Anzen Computing, Inc. 514 E. Washington Ann Arbor, MI 48104
+1.734.669.0800 Voice +1.734.669.0404 FAX
Received on May 19 2000