Snort mailing list archives

OT - Demarc setup with remote sensor


From: Jeff Newton <Jeff_Newton () pmc-sierra com>
Date: Thu, 24 Jan 2002 11:28:04 -0800


I've got one PC running a snort on 3 different interfaces.  On another
PC, I'm running mysqld and Demarc/PureSecure.  I've got the PureSecure
console
up and running as well as snort logging to mysql.  I see the logged
alerts in the console.

Under the configure tab of PureSecure, Sensor details indicate that SID
1-3 are assigned to each sensor interface but that "Rules have never
been implemented on host. Client possibly not running?".

I want to be able to use the console to modify rules, etc. on the remote
sensor.  How do I do this?  The installation doc talks about installing
and running the client.  I did put PureSecure on the remote sensor but
when I run /usr/sbin/demarcd ? it complains that it cannot connect the
DB at 127.0.0.1.  This is correct, the DB is on another machine.

Can anyone help with the configuration.  

Cheers,

-- 
Jeff Newton

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: