IDS mailing list archives

Re: Snort Monitoring


From: Jérôme Tytgat <jtytgat () websurg com>
Date: Wed, 30 Oct 2002 10:22:25 +0100

or ps-watcher which work with regex
----- Original Message -----
From: "Chris Fairbourne" <chris () camsystems com>
To: "'Scott M. Algatt'" <salgatt () turtleshell net>
Cc: <focus-ids () securityfocus com>
Sent: Tuesday, October 29, 2002 1:59 AM
Subject: RE: Snort Monitoring


I am looking for something that will provide monitoring of snort for me.
I have several remote installs of Snort 1.9 and need to find a way to
monitor them to make sure they are operational.


DJ Bernstein's daemontools (supervise/svcscan) can monitor & restart yer
Snort daemon for ya.
http://cr.yp.to/daemontools/svscan.html
Perhaps a bit more elegant than something homebrew anyway.


Regards,
chris



Current thread: