From ad421389225db7840529319149db6f59dee4e8b9 Mon Sep 17 00:00:00 2001 From: bmeeks8 Date: Mon, 20 May 2013 21:55:24 -0400 Subject: More tweaks to new Snort Pkg Sync code. --- config/snort/snort_sync.xml | 52 +++++++++++++++++++++++++++++++++------------ 1 file changed, 39 insertions(+), 13 deletions(-) (limited to 'config/snort/snort_sync.xml') diff --git a/config/snort/snort_sync.xml b/config/snort/snort_sync.xml index 5bfeba12..274d3fc9 100755 --- a/config/snort/snort_sync.xml +++ b/config/snort/snort_sync.xml @@ -47,7 +47,7 @@ POSSIBILITY OF SUCH DAMAGE. Currently there are no FAQ items provided. snortsync 1.0 - Proxy server snort: XMLRPC Sync + Snort: XMLRPC Sync (EXPERIMENTAL) /usr/local/pkg/snort/snort.inc @@ -86,17 +86,17 @@ POSSIBILITY OF SUCH DAMAGE. - Snort XMLRPC Sync + Snort Package XMLRPC Sync Settings listtopic Enable Sync varsynconchanges - +
Important: While using "Sync to hosts defined below", only sync from host A to B, A to C but do not enable XMLRPC sync to A. This will result in a loop!]]>
select - auto + disabled @@ -104,26 +104,42 @@ POSSIBILITY OF SUCH DAMAGE.
- XMLRPC timeout + XMLRPC Timeout varsynctimeout input - 150 + 150 5 - Destination Server + Refresh Rule Sets + vardownloadrules +
+ During each Snort package sync operation, ask the target host to check for + a new set of posted rule sets files and refresh the local copies if necessary. The default is + to refresh the files if newer versions have been posted.]]>
+ select + yes + + + + +
+ + + Replication Targets none rowhelper Enable varsyncdestinenable + checkbox - GUI Protocol + Protocol varsyncprotocol http or https]]> select @@ -134,28 +150,38 @@ POSSIBILITY OF SUCH DAMAGE. - GUI IP-Address + IP-Address varsyncipaddress input 15 - GUI Port + Port varsyncport - + input 3 - - GUI Admin Password + + Admin Password varsyncpassword password 20 + + Start Snort + varsyncsnortstart + + checkbox + + + WARNING: This feature is considered experimental and not recommended for production use + listtopic +
write_config();snort_sync_on_changes(); -- cgit v1.2.3