RE: General snort question

["Alex Butcher, ISC/ISYS" <Alex.Butcher () bristol ac uk>]

--On 10 September 2004 16:07 -0400 Wendell Smith <wendels () castlebranch com> 
wrote:

> I only found one reference to the word "sensor" in the entire Snort
> manual. I grep for "sensor" in the install/doc dir and I find only two
> instances of the word. Neither of which sheds any light on how to make 
use > of this mechanism.
> So...
>
> Could someone point me in the direction of some documentation about
> utilizing and deploying snort sensors that relay information to a
> central back-end server?

The usual way is to use the database output plugin, or one of the spool 
processors out there (i.e. barnyard, FLoP or mudpit) and a SQL database 
(MySQL and PostgreSQL are the usual choices).

> Wendell

Best Regards,
Alex.
--
Alex Butcher: Security & Integrity, Personal Computer Systems Group
Information Systems and Computing             GPG Key ID: F9B27DC9
GPG Fingerprint: D62A DD83 A0B8 D174 49C4 2849 832D 6C72 F9B2 7DC9




-------------------------------------------------------
This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170
Project Admins to receive an Apple iPod Mini FREE for your judgement on
who ports your project to Linux PPC the best. Sponsored by IBM.
Deadline: Sept. 24. Go here: http://sf.net/ppc_contest.php
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users