Snort mailing list archives
Re: Multiple Barnyard questions
From: "Andrew R. Baker" <andrewb () snort org>
Date: Mon, 30 Jun 2003 08:13:38 -0400
Gordon Cunningham wrote:
I’ve got a machine with several NICs running multiple instances of snort, successfully logging to separate uni alert and log files. However, I can’t seem to run multiple instances of barnyard with multiple conf files to get those logs entered into SQL for ACID reporting, etc. Is there some trick I’ m missing, or should I have all snort instances report to the same log files? Details upon request.
Use the "-X <pidfile>" command line option with Barnyard to get it to use a different PID file for each instance. -A ------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100006ave/direct;at.asp_061203_01/01 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- jPgraph Jose Fernandes (IT) (Jun 27)
- Multiple Barnyard questions Gordon Cunningham (Jun 27)
- Re: Multiple Barnyard questions Andrew R. Baker (Jun 30)
- Multiple Barnyard questions Gordon Cunningham (Jun 27)