[sentinix-list] Sentinix Rocks! Question on general use

[email protected] Wed, 07 Jul 2004 14:31:14 +0000
Newsgroups gmane.linux.sentinix
Message-ID <W1028013498269901089210674@webmail1>
Hello All,
First let me say how much the developers of Sentinix deserve thanks for b=
ringing such a wonderful distribution like Sentinix to the open source co=
mmunity.  They have obviously put a lot of hard work into this distro and=
 deserve thanks from all of us.  That said, I now have a simple question:=


1) Am I to understand that Sentinix is really not a stand-alone applicati=
on but rather a method of distributed control of remote sensors?  I ask t=
his because whenever I attemtp to change the rule set according to the re=
commended methods I see that the snort.etho0.conf file does not update al=
though the "preview" display does.  Thus, I'm wondering if these updates =
I am attemtping to make to the stand alone system are really not what sen=
tinix is designed for, since I think these updates are supposed to, and o=
nly can, be "pushed" to a remote sensor.  Am I correct in this assumption=
?

2)  Assuming that one manages a remote sensor from the Sentinix box, what=
 ports must be open for management on the remote site?

3) I would like to put tcpflow on the sentinix box but whenever I load th=
e binary it complains about missing files.  Is there a method of compilin=
g tcpflow so that it doesn't ask for missing files.

Thanks again for your wonderful product and I look forward to any assista=
nce via this forum that some kind soul might afford.

J.