question on distributed snort collection

[Garrett.Allen () ser com]

i've gotten the pink beastie stable and am getting useful info out.  so far,
so good.  now i would like to extend to remote locations.  is there a
preferred means of doing this?  flat vs. tiered mom (mom = monitor of
monitors)?  still in the planning phase and have time to test in the lab,
but any shortcuts / recommendations are appreciated.

thanks.
garrett



-------------------------------------------------------
This SF.net email is sponsored by:  Etnus, makers of TotalView, The best
thread debugger on the planet. Designed with thread debugging features
you've never dreamed of, try TotalView 6 free at www.etnus.com.
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users