Re: Multiple Processes - Snort

[Sam <sam () neuroflux com>]

Take a look at section 1.4.2 in the manual.  Also, you may want to take a
look at the Barnyard program on www.snort.org as well.

-Sam

On Thu, 14 Mar 2002, Sonika Malhotra wrote:

> Hello List,
>     Is it possible that to decouple the logging and analysis stage of
> snort , i can run two different processes of snort. one in logger mode
> writing to tcpdump file and other in the NIDS mode to only analyze the
> file .
>     i.e. one process will read the tcpdump file and other will write to
> it.
>     just an idea to reduce packet loss..may be this would increase
> efficiency of snort in high speed N/w.
> thanx.
> sm.
>
>
>
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users