RE: [Tripwire-announce] what to do??

[Gary E. M. <ge...@re...>]

Yo Ron!

On Wed, 11 Apr 2001, Ron Forrester wrote:

> I really think if you explore the EMAILREPORTLEVEL values from 0 to 4 you
> will find one
> that you can live with until Gary and I come up with something better, and
> in the meantime
> at least your system(s) are more secure for having tripwire running on them.

I think the frustration he has here is similar to one I initially had
with the new tripwire.  The problem we both had is that there is no
obvious way to increase the verbosity when you do a simple run
like this:
	tripwire -m c

Is there?  The only ways I found to get the expanded reports
were to do the EMAILREPORT thing, or run a separate "twreport".  So
maybe one thing to do is to increase the default verbosity.

One problem that should also be in a FAQ is how to just set a
global emailto for the entire run.  Putting it in every subsection is
a pain.  I think this was just added as a feature but should be made
simpler.  Maybe just a command line option?

My main problem with the emailto is that the report is sent
as a blank message with an attachment.  This means I have to dowload
and read the attachment separately.  Is there really a point to this?
Just put in in line.

These may seem like simple things to you guys that have been using
Ver 2 for a while, but they are major hurdles for newbies and upgraders.

RGDS
GARY
---------------------------------------------------------------------------
Gary E. Miller Rellim 20340 Empire Ave, Suite E-3, Bend, OR 97701
	ge...@re...  Tel:+1(541)382-8588 Fax: +1(541)382-8676