Snort mailing list archives
RE: ACID shows all sensors as 'unknown:eth1:eth1' - how can this be f ixed?
From: "Schmehl, Paul L" <pauls () utdallas edu>
Date: Thu, 6 Mar 2003 14:04:37 -0600
Yes. Specify the hostname in snort.conf. For example, if you're logging to a database, you use the log database blah blah blah line - just add sensor_name="somename". Like this: output database: log, mysql, user=snort password=passwd dbname=snort host=localhost sensor_name=buttercup2 Paul Schmehl (pauls () utdallas edu) Adjunct Information Security Officer The University of Texas at Dallas http://www.utdallas.edu/~pauls/ AVIEN Founding Member
-----Original Message----- From: Ryan Barrett [mailto:RyanB () webex com] Sent: Thursday, March 06, 2003 1:41 PM To: 'snort-users () lists sourceforge net' Subject: [Snort-users] ACID shows all sensors as 'unknown:eth1:eth1' - how can this be f ixed? My sensors are identifying themselves as 'unknown:eth1:eth1' in ACID, is there a way to correct this so that the actual hostname of the sensor shows up? Thanks,Ryan Barrett Security Engineer _______________________________________________ WebEx Communications, Inc. 307 W. Tasman Drive San Jose, Ca. 95134 www.webex.com ph: 408-435-7570 http://mwbeta.webex.com/meet/ryanb------------------------------------------------------- This SF.net email is sponsored by: Etnus, makers of TotalView, The debugger for complex code. Debugging C/C++ programs can leave you feeling lost and disoriented. TotalView can help you find your way. Available on major UNIX and Linux platforms. Try it free. www.etnus.com _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/s> nort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
------------------------------------------------------- This SF.net email is sponsored by: Etnus, makers of TotalView, The debugger for complex code. Debugging C/C++ programs can leave you feeling lost and disoriented. TotalView can help you find your way. Available on major UNIX and Linux platforms. Try it free. www.etnus.com _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- ACID shows all sensors as 'unknown:eth1:eth1' - how can this be f ixed? Ryan Barrett (Mar 06)
- <Possible follow-ups>
- RE: ACID shows all sensors as 'unknown:eth1:eth1' - how can this be f ixed? Schmehl, Paul L (Mar 06)