RE: ACID shows all sensors as 'unknown:eth1:eth1' - how can this be f ixed?

["Schmehl, Paul L" <pauls () utdallas edu>]

Yes.  Specify the hostname in snort.conf.  For example, if you're
logging to a database, you use the log database blah blah blah line -
just add sensor_name="somename".

Like this:
output database: log, mysql, user=snort password=passwd dbname=snort
host=localhost sensor_name=buttercup2

Paul Schmehl (pauls () utdallas edu)
Adjunct Information Security Officer
The University of Texas at Dallas
http://www.utdallas.edu/~pauls/
AVIEN Founding Member 

> -----Original Message-----
> From: Ryan Barrett [mailto:RyanB () webex com] 
> Sent: Thursday, March 06, 2003 1:41 PM
> To: 'snort-users () lists sourceforge net'
> Subject: [Snort-users] ACID shows all sensors as 
> 'unknown:eth1:eth1' - how can this be f ixed?
>
>
> My sensors are identifying themselves as 'unknown:eth1:eth1' 
> in ACID, is there a way to correct this so that the actual 
> hostname of the sensor shows up?
>
> Thanks,
>
>
> > Ryan Barrett
> > Security Engineer _______________________________________________
> > WebEx Communications, Inc.
> > 307 W. Tasman Drive
> > San Jose, Ca. 95134
> > www.webex.com
> > ph:  408-435-7570
> > http://mwbeta.webex.com/meet/ryanb
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: Etnus, makers of 
> TotalView, The debugger 
> for complex code. Debugging C/C++ programs can leave you 
> feeling lost and 
> disoriented. TotalView can help you find your way. Available 
> on major UNIX 
> and Linux platforms. Try it free. www.etnus.com 
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe: 
> https://lists.sourceforge.net/lists/listinfo/s> nort-users
>
> Snort-users list archive: 
> http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
This SF.net email is sponsored by: Etnus, makers of TotalView, The debugger
for complex code. Debugging C/C++ programs can leave you feeling lost and
disoriented. TotalView can help you find your way. Available on major UNIX
and Linux platforms. Try it free. www.etnus.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users