RE: snort implementation

["Wayne T Work" <securitygauntlet () snet net>]

VPN for data transfer is very good. You could log locally to MySQL and dump
the results nightly in an encrypted fashion. This precludes real-time
monitoring. You could set up an Apache Server on the branch site using SSL
to view the web site from HQ. Plenty of options. Do what you are most
comfortable with seeing you are going to have to maintain these sites.

Best of Luck
Wayne

-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net]On Behalf Of Ganu Skop
Sent: Sunday, January 27, 2002 7:12 AM
To: snort-users () lists sourceforge net
Subject: [Snort-users] snort implementation


hi
i have my branch connected to the internet as well as
headquarter.
therefore is it safe to transfer snort log to mysql
(at headquarter) or or use ipsec ?
which one is better ? use tcpdump or snort log (mysql)
?
anyone has encounter in regard to bandwidth ?

rgds


=====
//skopganu

__________________________________________________
Do You Yahoo!?
Great stuff seeking new owners in Yahoo! Auctions!
http://auctions.yahoo.com

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users