Re: prelude-admin list shows empty profile

Yoann Vandoorselaere <[email protected]>
Newsgroups gmane.comp.security.ids.prelude.user
Message-ID <1208453713.6459.22.camel@arwen>
Le jeudi 17 avril 2008 à 10:26 -0700, LC Bruzenak a écrit :
> On Thu, Apr 17, 2008 at 10:07 AM, Yoann Vandoorselaere <
> [email protected]> wrote:
> > > [root@v6auditsvr ~]# prelude-admin list
> > > Profile         Permission Issuer AnalyzerID
> > > -----------------------------------------
> > > prelude-lml     idmef:w 3972034208352731
> > > auditd          idmef:w 3972034208352731
> > > prelude-manager idmef:w 3972034208352731
> > >                 idmef:w 676935298793643
> > >                 idmef:w 2425523859259492
> > >
> >
> > It is not empty, it means that prelude-manager has permissions to write
> > to: 3972034208352731, 676935298793643, 2425523859259492 analyzerID.
> >
> > If you have suggestions on way to make it more "clear", please let us
> > know (I found out that repeating the profile name on multiple line when
> > there is a lot of profile make it hard to read).
> >
> > Regards,
> 
> 
> OK, I get it now. Thanks for the explanation.
> I agree; repeating the profile name would not be clear. If I or colleagues
> think of something I'll pass it along.
> 
> Where would I be able to see those IDs for correlation to the profile?

Could you please provide us with the output of: prelude-admin list -l
This will provide more information about each sensor analyzerID.

Regards,

-- 
Yoann Vandoorselaere | Responsable R&D / CTO | PreludeIDS Technologies
Tel: +33 (0)8 70 70 21 58                  Fax: +33(0)4 78 42 21 58
http://www.prelude-ids.com

_______________________________________________
Prelude-user site list
[email protected]
http://lists.prelude-ids.org/mailman/listinfo/prelude-user
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.