Snort mailing list archives

Re: Snort in a H.A. environment.

From: Bennett Todd <bet () rahul net>
Date: Tue, 21 Jan 2003 16:59:26 -0500

2003-01-20T04:18:44 Federico Lombardo:

How I can make possible to start snort on the other Node-2 when
it became active, and how to stop snort in Node-1 when it became
standby ???


This may seem like a really stupid question, but why stop the
standby snort? Why not just leave it running all the time?

If double-taps are a bother, gather the events to a central
collection point and run duplicate elimination there.

-Bennett

Attachment: _bin
Description:

Current thread:

Snort in a H.A. environment. Federico Lombardo (Jan 20)
- Re: Snort in a H.A. environment. Saad Kadhi (Jan 20)
- Re: Snort in a H.A. environment. Glenn Forbes Fleming Larratt (Jan 20)
- Re: Snort in a H.A. environment. Erek Adams (Jan 20)
- Re: Snort in a H.A. environment. Bennett Todd (Jan 21)
- <Possible follow-ups>
- Re: Snort in a H.A. environment. Federico Lombardo (Jan 20)
  - Re: Snort in a H.A. environment. Saad Kadhi (Jan 20)
- Re: Snort in a H.A. environment. Federico Lombardo (Jan 20)
  - Re: Snort in a H.A. environment. Saad Kadhi (Jan 20)