• Support
  • Forums
  • Blogs

agent-ossim job ?

haifaisghaifaisg

New Life Form
+3
can any one tell me what does the ossim-agent do ?
and what's the diffirence between monitors and detectors and plugins ?
Tagged:

Share post:

Best Answer

  • Answer ✓
    ossim-agent is the process that takes in data and normalizes it to send to the server process. Detector plugins are standard data plugins meaning they are consuming log data, or query results from mssql or mysql, or sdee, etc. Monitor plugins are monitoring an actual process such as nmap. Honestly there is not much customization or configuration done with the monitor plugins. The detection plugins are where all the customization and configuration would happen.
Sign In or Register to comment.