traffic labeling and argus-clients-3.0.2

Phillip Deneault deneault at WPI.EDU
Tue Mar 17 08:35:12 EDT 2009


Hypothetically speaking, would it be possible to add a signal to re-read
the radium config file and the list of classifiers to be able to
dynamically add and remove labels without restarting the daemon?

Then one could dynamically labels flows with things that are dynamically
evil. :-)

Phil

Carter Bullard wrote:
> In the new radium.conf configuration file is a new option,
> RADIUM_CLASSIFIER_FILE, so you can specify a label configuration.
> An example of this file can be found in ./support/Config/ralabel.conf.
> You can have any number of specific addresses, or ranges, CIDR
> formats whatever.  The labels can overlap, and when they do
> radium() adds multiple labels, with ","'s as seperators.

-- 
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Phil Deneault              "We work in the dark. We do what we can.
deneault at wpi.edu                              We give what we have.
Network Security Officer 		  Our doubt is our passion,
Information Security                   and our passion is our task.
Worcester Polytechnic Institute    The rest is the madness of art."
http://www.wpi.edu/~deneault/   		      - Henry James
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-




More information about the argus mailing list