Snort mailing list archives

RE: Multiple Win32 occurances?


From: "Michael Steele" <michaels () winsnort com>
Date: Wed, 26 Nov 2003 07:53:17 -0800

The biggest concern will be dropping packets. Have you researched this? This
is not a normal setup and should be avoided in critical operations.

Cheers...

-Michael Steele
-- 
 System Engineer / Security Support Technician     
 mailto:michaels () winsnort com    
 Website: http://www.winsnort.com
 Snort: Open Source Network IDS - http://www.snort.org


-----Original Message-----
From: snort-users-admin () lists sourceforge net [mailto:snort-users-
admin () lists sourceforge net] On Behalf Of Jacob Roberts
Sent: Wednesday, November 26, 2003 6:57 AM
To: Snort Users Postings
Subject: RE: [Snort-users] Multiple Win32 occurances?

We are running three instances of snort on 1 nic and haven't seen any
problems.  We are logging to a MySQL database.  Each instance logs to
its own database.  Each instance also has its own config files and
ruleset files.  They are completely independent installs.

We have not needed to run instances on two or more nic's, but I suppose
if 3 can run on 1 nic then why not 2 on 2 nics.




-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net] On Behalf Of Rich
Adamson
Sent: Tuesday, November 25, 2003 3:57 PM
To: Snort Users Postings
Subject: [Snort-users] Multiple Win32 occurances?


Anyone tried to monitor two or more nic's from a single Win32 snort, or,
run two Win32 snort images (one on each nic)? Problems / issues?

Rich





-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?  SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?  SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=ort-users





-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?  SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: