OSSEC Server could manage if agent is connected or not.
spookernote:/var/ossec/bin # ./list_agents
OSSEC HIDS list_agents: List available agents.
Available options:
-h This help message.
-a List all agents.
-c List the connected (active) agents.
-n List the not connected (active) agents.
I don't know if there is signature to monitor that or something related.
Regards,
Rodrigo Montoro (Sp0oKeR)
On Jan 18, 2008 8:01 AM, Verlag Neue Stadt <[EMAIL PROTECTED]> wrote:
>
> Hello,
>
> I could imagine that it would be helpful to have recognised if an agent
> is beeing terminated
> or even deinstalled.
>
> Is that already possible today?
>
>
> Thank's for your feedback!
>
> John
>
>
>
>
--
=========================
Rodrigo Ribeiro Montoro
Analista de Segurança
SnortCP / RHCE / LPIC-I
http://spookerlabs.multiply.com
=========================
