[osiris-devel] monitoring host state

[Brian Wotring]

On Jan 5, 2004, at 7:11 PM, Alexei_Roudnev wrote:

> Few ideas, related to few last issues:
>
> (1) let's modify (I can do it) file match so that 'xxx' mathc to 
> '''.../xxx"
> or "...\xxx" on Windows; I tried to find simple reg-exp function for 
> Win32
> but it (simple one) does not exists;

I am afraid of making this filter behave differently on different 
platforms.  I think a better solution is to find a regex for Windows.  
If regex support doesn't exist, a full path must be specified.

> (3) Windows / Registry. May be, 'services' can be monitored by special
> command as a special case.
>
> (4) There is one more interesting (for IDS) resource - ports opened for
> LISTEN.

I'll add these the the list of possible features in the future.  The 
like the open ports idea.  As for the 3.0 release, I think we have 
enough to deal with already.

--
     Brian Wotring ( brian at shmoo.com )
     PGP KeyID: 0x9674763D