Snort mailing list archives
RE: Name that sensor
From: "Hicks, John" <JHicks () JUSTICE GC CA>
Date: Thu, 12 Sep 2002 13:22:59 -0400
I'm not too sure that I'm understanding correctly, but from what I gather your thinking of starting multiple snort instances from 1 config file, whereas you should be using 1 config file per node so you can properly control each config. As such, the single line sensor_name= will suffice. hth, John -----Original Message----- From: Tim [mailto:twr () bellsouth net] Sent: Thursday, September 12, 2002 3:30 PM To: Snort-list Subject: [Snort-users] Name that sensor Hey ppl, Making progress, I have Snort and Webmin on one box and ACID, Apache and MySQL on another box. Everything is working as it should be. I would like to be able to name the sensors so that when I look at ACID I would know to what eth1, eth2 and eth3 subnets they belong to. I have searched the archives and I have found that you can name the sensors within the snort.conf file at the line 'output database' and adding sensor_name=xyzabc. What if you have multiple sensors, how would you add the sensor names? Does one add multiple lines with the sensor_name=sensor appended on each line? As always thanks in advance for the input ppl :-) Tim -- Mia/Fla Network Security Student
Current thread:
- Name that sensor Tim (Sep 12)
- <Possible follow-ups>
- RE: Name that sensor Hicks, John (Sep 12)