Lasse - that is a great suggestion. We should look at that. Could you feature request item on trac, so this doesnt get lost?
One thing though --- right now the client sends info back to the server as its processing a web page. If it crashes (ie blue screen), we still capture (at least parts of) the data...we need to see whether we can come up with a way to preserve such functionality with your suggestion... Christian On Fri, Oct 24, 2008 at 1:02 PM, Lasse Borup <[EMAIL PROTECTED]>wrote: > Sorry about this friday night spamming... > > But one last thought: Would it not be preferable if the capture client > reports were retrieved by way of the Vix Api (vmrun perhaps)? Since the > clients are intentionally infected by malware, i would prefer if they did > not know where to locate my capture server. > If using the vix api, the Capture server would not have to be exposed to > the internet in any way, since it could be located on a private network with > the Vmware server management interface. > Also, i think this would make Capture-HPC simpler to deploy, since it would > only need "one-way" communication. > > Just my last thoughts on this, going into the weekend. > > Regards, > Lasse > > _______________________________________________ > Capture-HPC mailing list > Capture-HPC@public.honeynet.org > https://public.honeynet.org/mailman/listinfo/capture-hpc > > -- ---- Web: http://www.mcs.vuw.ac.nz/~cseifert PGP key http://www.mcs.vuw.ac.nz/~cseifert/pgpkey.txt Primary key fingerprint: E979 0D9A 9187 D821 F86F B712 C8DB 0583 B046 BAEF
_______________________________________________ Capture-HPC mailing list Capture-HPC@public.honeynet.org https://public.honeynet.org/mailman/listinfo/capture-hpc
