RE: snort and MRTG on the same box?

["East, Bill" <eastb () PFFCU org>]

> -----Original Message-----
> From: sirikanya () abxnetwork com [mailto:sirikanya () abxnetwork com]
> Sent: Monday, February 18, 2002 9:38 PM
> To: snort-users () lists sourceforge net
> Subject: [Snort-users] snort and MRTG on the same box?
>
>
> Hi
>
> Would it be possible to run snort and MRTG on the same box? I 
> have MRTG
> running on linux (mandrake 8.0) , the machine's spec is great 
> (2 processors
> and 512 MB RAM)with 2 NICs and 2 IPs . Do I have to lose one 
> of the cards
> for snort (set it to be in promisc mode with no ip)?
Sirkanya - 

As far as co-existence, MRTG and Snort seem to get along well; I have them
running together on a test box with no problems. Although I would guess that
it would not be an issue, you might want to keep an eye on Snort's
performance while MRTG is doing its periodic updates. If you are on a
heavily-utilized segment you might want to do some testing.

Last but not least, if Snort is going to be publicly exposed or otherwise
likely to be a target, I would run as few services on it as possible so as
to keep your security tight. But if this is not a concern I would say go for
it.

-- 
be - MOS



... this must be what it's like to be a COLLEGE GRADUATE!!


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users