Re: [Devmon] Due to PCI 3.0 requirements starting in 2015 we will not be able to use SNMP v1 or SNMP v2

[Jeremy L. <jla...@re...>]

What about tunneling through ssh?  Would that comply with PCI
requirements?  One way to do this would be to have devmon run on each
client, configured to probe 127.0.0.1, and report its results through the
tunnel.  Strictly speaking, you're not tunneling the SNMP probe, instead
you're tunneling the back-end BigBrother protocol that reports to Xymon.

You could either establish a persistent tunnel (a la xymon-tunnel.sh <
https://wiki.xymonton.org/doku.php/addons:ssh_tunnel>) or execute a
slightly modified devmon via an ssh command - modified to run once only (by
changing the "while(1)" into an "if(1)", for example).

This is a little bit messy, having to have devmon and its templates
installed everywhere, but probably a lot easier than trying to splice in
support for SNMPv3.

J


On 14 October 2014 00:03, Johan Sjöberg <Joh...@de...>
wrote:

> This is something that we will probably also need, as we are currently
> implementing PCI DSS in our environment.
> Is there anyone still working on devmon development?
>
> /Johan
>
> -----Original Message-----
> From: Mark Mulligan [mailto:MMu...@ll...]
> Sent: den 1 augusti 2014 19:37
> To: dev...@li...
> Subject: [Devmon] Due to PCI 3.0 requirements starting in 2015 we will not
> be able to use SNMP v1 or SNMP v2
>
> Are there any plans to upgrade devmon to snmp v3?
>
> Thanks,
>
> Mark Mulligan
> Associate Operations Engineer - Splunk and Xymon Admin P Please do not
> print this e-mail unless necessary
>
>
>
>
>
> ------------------------------------------------------------------------------
> Want fast and easy access to all the code in your enterprise? Index and
> search up to 200,000 lines of code with a free copy of Black Duck Code
> Sight - the same software that powers the world's largest code search on
> Ohloh, the Black Duck Open Hub! Try it now.
> http://p.sf.net/sfu/bds
> _______________________________________________
> Devmon-support mailing list
> Dev...@li...
> https://lists.sourceforge.net/lists/listinfo/devmon-support
>
>
> ------------------------------------------------------------------------------
> Meet PCI DSS 3.0 Compliance Requirements with EventLog Analyzer
> Achieve PCI DSS 3.0 Compliant Status with Out-of-the-box PCI DSS Reports
> Are you Audit-Ready for PCI DSS 3.0 Compliance? Download White paper
> Comply to PCI DSS 3.0 Requirement 10 and 11.5 with EventLog Analyzer
> http://p.sf.net/sfu/Zoho
> _______________________________________________
> Devmon-support mailing list
> Dev...@li...
> https://lists.sourceforge.net/lists/listinfo/devmon-support
>