Snort mailing list archives
Re: Patch to have unified2 outputs for multiple snort instances
From: Russ Combs <rcombs () sourcefire com>
Date: Thu, 14 Feb 2013 12:06:44 -0500
Thanks. This is normally done by using snort -l <instance-directory>. Have you tried that? On Thu, Feb 14, 2013 at 10:26 AM, Guido Hungerbuehler <guh () open ch> wrote:
Hi I just wrote a patch which allows multiple snort instances to run in parallel. With this patch it is possible to only have one config file and still the unified2 output is directed to multiple files, each with the instance identifier. Just use the -G argument to specify the instance id. cheers guido ------------------------------------------------------------------------------ Free Next-Gen Firewall Hardware Offer Buy your Sophos next-gen firewall before the end March 2013 and get the hardware for free! Learn more. http://p.sf.net/sfu/sophos-d2d-feb _______________________________________________ Snort-devel mailing list Snort-devel () lists sourceforge net https://lists.sourceforge.net/lists/listinfo/snort-devel Archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel Please visit http://blog.snort.org for the latest news about Snort!
------------------------------------------------------------------------------ Free Next-Gen Firewall Hardware Offer Buy your Sophos next-gen firewall before the end March 2013 and get the hardware for free! Learn more. http://p.sf.net/sfu/sophos-d2d-feb
_______________________________________________ Snort-devel mailing list Snort-devel () lists sourceforge net https://lists.sourceforge.net/lists/listinfo/snort-devel Archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel Please visit http://blog.snort.org for the latest news about Snort!
Current thread:
- Patch to have unified2 outputs for multiple snort instances Guido Hungerbuehler (Feb 14)
- Re: Patch to have unified2 outputs for multiple snort instances Russ Combs (Feb 14)
- Re: Patch to have unified2 outputs for multiple snort instances Brad Tilley (Feb 15)