[sentinix-list] Sentinix Rocks! Question on general use
[email protected] Wed, 07 Jul 2004 14:31:14 +0000
| Newsgroups | gmane.linux.sentinix |
|---|---|
| Message-ID | <W1028013498269901089210674@webmail1> |
Hello All, First let me say how much the developers of Sentinix deserve thanks for b= ringing such a wonderful distribution like Sentinix to the open source co= mmunity. They have obviously put a lot of hard work into this distro and= deserve thanks from all of us. That said, I now have a simple question:= 1) Am I to understand that Sentinix is really not a stand-alone applicati= on but rather a method of distributed control of remote sensors? I ask t= his because whenever I attemtp to change the rule set according to the re= commended methods I see that the snort.etho0.conf file does not update al= though the "preview" display does. Thus, I'm wondering if these updates = I am attemtping to make to the stand alone system are really not what sen= tinix is designed for, since I think these updates are supposed to, and o= nly can, be "pushed" to a remote sensor. Am I correct in this assumption= ? 2) Assuming that one manages a remote sensor from the Sentinix box, what= ports must be open for management on the remote site? 3) I would like to put tcpflow on the sentinix box but whenever I load th= e binary it complains about missing files. Is there a method of compilin= g tcpflow so that it doesn't ask for missing files. Thanks again for your wonderful product and I look forward to any assista= nce via this forum that some kind soul might afford. J.