Re: Remote sensor startup issue.

["mdpeters" <michael.peters () lazarusalliance com>]

Are you suggesting that a remote Snort sensor can not send alerts to a 
central Snort MySQL system? It seems to me that all I need to do is resolve 
the startup malfunction. It logs just fine when I manually fire the remote 
sensor up.

I have no experience with Barnyard. Would I run a MySQL database on the 
sensor and use Barnyard to send alerts to the central system?

----- Original Message ----- 
From: "Leon Ward" <leon () countersnipe com>
To: "mdpeters" <michael.peters () lazarusalliance com>
Sent: Tuesday, February 15, 2005 5:23 AM
Subject: Re: [Snort-users] Remote sensor startup issue.


> Look at barnyard, its a good move.
>
> -Leon
>
> On Mon, 2005-02-14 at 16:38 -0500, mdpeters wrote:
> > I have a remote Snort sensor that upon system boot, will not start the 
> > Snort
> > process. This system is configured to send it's alert data to a central
> > snort system's MySQL database. I can run the same startup script and it 
> > all
> > works fine. I have tried moving the start order without success. I assume
> > this does not start because of the remote database connection.
> >
> > Does anyone have a tip for fixing this? Do I need to run MySQL on the 
> > remote
> > system as well and log to both?
> >
> > Best regards,
> >
> > Michael
> >
> >
> >
> > -------------------------------------------------------
> > SF email is sponsored by - The IT Product Guide
> > Read honest & candid reviews on hundreds of IT Products from real users.
> > Discover which products truly live up to the hype. Start reading now.
> > http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users () lists sourceforge net
> > Go to this URL to change user options or unsubscribe:
> > https://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
> > http://www.geocrawler.com/redir-sf.php3?list=snort-users
> --



-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users