Snort mailing list archives

Re: Snort in a H.A. environment.


From: Erek Adams <erek () snort org>
Date: Mon, 20 Jan 2003 09:35:19 -0500 (EST)

On Mon, 20 Jan 2003, Federico Lombardo wrote:

I've in a production scenario a checkpoint Firewall-1 Cluster-XL Firewall in
Active-StandBy configuration.

On the active Node-1 (active) i wanna run snort, and no problems with this.
The problema I want to solve is:

How I can make possible to start snort on the other Node-2 when it became
active, and how to stop snort in Node-1 when it became standby ???

Solution:  Learn about your clustering software.

In every cluster software that I've ever worked with (SunCluster and
Vertias Cluster), there is a script that runs when you need to start
services on the cluster when a node dies.  Simply have that script start
snort.  If the other node dies, you don't have to stop anything.  :)

Cheers!

-----
Erek Adams

   "When things get weird, the weird turn pro."   H.S. Thompson


-------------------------------------------------------
This SF.NET email is sponsored by: FREE  SSL Guide from Thawte
are you planning your Web Server Security? Click here to get a FREE
Thawte SSL guide and find the answers to all your  SSL security issues.
http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: