alarmprogram.sh for IDS 7.31
Posted in 2008
Topics: Logging & Checkpoints, Versions, Editions & End-of-Life
Hi I have a customer who runs IDS 7.31. Is it possible to just take the alarmprogram.sh from IDS 10.00 and use it for 7.31? Is it the same eventclasses for IDS 7.31? I dont want to use it for backup of logical logs, but to catch errors and warnings that IDS and report to me what it finds, just as in IDS 10. Kindly Regards Claes Lindvall
CLAES LINDVALL wrote: > Hi > > I have a customer who runs IDS 7.31. Is it possible to just take the > alarmprogram.sh from IDS 10.00 and use it for 7.31? > Is it the same eventclasses for IDS 7.31? > I dont want to use it for backup of logical logs, but to catch errors > and warnings that IDS and report to me what it finds, just as in IDS 10. > > Kindly Regards > Claes Lindvall > > I think it's ok as long as on both system use same environment cmiiw -- wahyu Have you tried before? connect openvpn 2.1 on client and openvpn 2.0x on the server? honestly I never try this, I always use same openvpn version on both client and server I guees, if we use simple script on ovpn/conf file, we can connect both client and server with different version, CMIIW -- wahyu http://veryeasytutorial.blogspot.com/
Thanks for your reply cmiiw! I have also found a document here at iiug.org named K9.pdf (Improved Scripting of IDS Alarms). And it says that it is the same eventclasses on 7.x as in 9.x and 10.x. And in the pub on the ftpserver I have found the scripts the document is refering to so I am now well equipped for monitoring my IDS instances eventalarms with these tools. Regards Claes