Snort mailing list archives

Snort sensor setup


From: Lance Boon <lbtf73_99 () yahoo com>
Date: Mon, 22 Mar 2004 13:38:16 -0800 (PST)

I'm looking for recommendations for setting up snort
in a multi site environment. I've got 5 branch offices
that are connected via ipsec over cable modem to the
main office which is also on cable modem. I've got
snort up and running in the main office thanks to
Patrick Harpers guide. If I just had snort sensors
setup in the branch offices and set those up to log
back to the main office using MySql how much bandwidth
would I be consuming? The maximum upload that I have
is 768k. I could have all the offices setup with their
own dedicated MySql, Acid, Apache etc.. setup but I'm
looking to consolidate and have the sensors log back
to 1 MySql server versus 6 individual servers. Also if
it works to have them all log back to the main office
would the best setup be to have individual snort
databases etc and have apache etc setup accordingly.
Any suggestions or recommendations would be greatly
appreciated.

Lance

__________________________________
Do you Yahoo!?
Yahoo! Finance Tax Center - File online. File on time.
http://taxes.yahoo.com/filing.html


-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: