Re: [Snort-users] SnortSMS

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Curtis,

I use SnortSMS to manage 15 sensors, it's not bad. I just have had
issues with importing the rule sets from a tarball. Also the pushing of
the config can be somewhat unreliable. Also the restarting with HUP
does not work properly for us. The Config generator is ok, but if you
need to define multiple variables you have to create new variables by
hand. Another thing I dong like is the agent requires a webserver with
php support on the sensor. For the most part though it's not to bad, it
works a lot better then snortcenter :D

On Wed, 23 Jul 2008 10:55:05 -0500
"Curtis LaMasters" <curtislamasters@gmail.com> wrote:

> Can anyone give remarks on the SnortSMS project? I'm looking at it to
> manage a large number (+50) of snort IDS's in remote locations.
> Please give me any feedback that you can (good/bad/ugly). Thanks.
>
> Curtis LaMasters
> http://www.curtis-lamasters.com
> http://www.builtnetworks.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.7 (GNU/Linux)

iD8DBQFIh2Nxj3IHuK3WumgRAgYHAKCnibF5a0tC6F67D5RXU8/5q0q4hQCgpJZJ
ViI4//A1kAd9bWBA/F32p+s=
=pgiE
-----END PGP SIGNATURE-----
-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.p...r_id=100&url=/
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users

The Snort SMC which includes the IDSPM is also worth it in my opinion.
The database mgt and reporting is very nice.

On Wed, Jul 23, 2008 at 1:47 PM, Jeff Dell <jdell@activeworx.com> wrote:
> You can use IDS Policy Manager. It is a free tool that makes managing
> multiple snort sensors/policies very easy.
>
> http://www.activeworx.org
>
>
>
> Cheers,
>
> Jeff
>
>
>
> From: snort-users-bounces@lists.sourceforge.net
> [mailto:snort-users-bounces@lists.sourceforge.net] On Behalf Of Curtis
> LaMasters
> Sent: Wednesday, July 23, 2008 1:31 PM
> To: snort-users@lists.sourceforge.net
> Subject: Re: [Snort-users] SnortSMS
>
>
>
> Thak you for that information. Are there any alternatives that someone would
> recommend?
>
> Curtis LaMasters
> http://www.curtis-lamasters.com
> http://www.builtnetworks.com
>
> -------------------------------------------------------------------------
> This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
> Build the coolest Linux based applications with Moblin SDK & win great
> prizes
> Grand prize is a trip for two to an Open Source event anywhere in the world
> http://moblin-contest.org/redirect.p...r_id=100&url=/
> _______________________________________________
> Snort-users mailing list
> Snort-users@lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/...fo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.p...st=snort-users
>



--
Robert Sharp
robertsharp@gmail.com

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.p...r_id=100&url=/
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users