Re: IDS: Real-world experience

[Robert Graham <robert_david_graham@yahoo.com>]

FAQ: See http://www.ticm.com/kb/faq/idsfaq.html
IDS: See http://www-rnks.informatik.tu-cottbus.de/~sobirey/ids.html
HELP: Having problems.. Then email questions to ids-owner@uow.edu.au
NOTE: You MUST remove this line from reply messages as it will be filtered.
SPAM: DO NOT send unsolicted mail to this list.
USUB: email "unsubscribe ids" to majordomo@uow.edu.au
---------------------------------------------------------------------------

--- Michele Michelotto <michele.michelotto@pd.infn.it> wrote:

> Robert Graham wrote:
> > similarly. Things only suck when you open a GUI to administer the machines
> -- at that point, the
> > attractiveness of command-line interfaces become apparent (FYI, the GUIs
> suck even worse on
> > Windows 2000).
> 
> What do you mean by opening a GUI? Can you run WNT without the GUI or
> even
> better without the monitor/consolle?

NT requires a GUI, but you can ignore it.
All management is done with a GUI client, though you can manage almost
everything from a command line, but that's real, real painful.
All GUI clients can run remotely (through RPC), but requires that you open up a
lot of ports et al. Nothing like a clean ssh shell with a single point of
security control. Thus, I need to run the GUI locally, and it is SLOWWWW.

There are essentially 2 ways of managing a system (NT or UNIX) remotely, RPC or
remote shell (which can be command line or X). Microsoft has gone the exclusive
RPC route. UNIX machines tried this, but it always turns out the remote shell
is easier.

> I'll try to explain better. I like unix because I can start
> everything except the X. In the moment you start the X server a lot
> of memory is lost. When you actually log in the consolle much more
> memory
> is lost. I'd like to run WNT headless.

You can run Windows essentially headless. The GUI architecture is vastly
different than X, and consumes A LOT LESS MEMORY. "Essentially headless" means
that while there is a GUI, you can ignore it and pretend it doesn't exist.


_________________________________________________________
Do You Yahoo!?
Free instant messaging and more at http://messenger.yahoo.com