what would be the appropriate thing to do?

["Onie Camara" <neil () restricted dyndns org>]

Ok. Assuming I have setup many sensors on the main ofc and few more sensors
on another branch.
These sensors logs to mysql db. On the branch site, it does not log to mysql
located in the main ofc.

I recall a post that someone mentioned about rsync but I couldnt remember
how it was used.

1. Would it be a good idea to configure branch site to log to the main site?
I'm seeing performance
degradation here as it will use the wan connection.

2. In just one site, say main ofc, is it a good idea to configure the
sensors to log to a main mysql server?

3. What would be the best design of snort if I will install if the network
is Enterprise.

Thanks.

Neil


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users