Snort mailing list archives
Snort sensor setup
From: Lance Boon <lbtf73_99 () yahoo com>
Date: Mon, 22 Mar 2004 13:38:16 -0800 (PST)
I'm looking for recommendations for setting up snort in a multi site environment. I've got 5 branch offices that are connected via ipsec over cable modem to the main office which is also on cable modem. I've got snort up and running in the main office thanks to Patrick Harpers guide. If I just had snort sensors setup in the branch offices and set those up to log back to the main office using MySql how much bandwidth would I be consuming? The maximum upload that I have is 768k. I could have all the offices setup with their own dedicated MySql, Acid, Apache etc.. setup but I'm looking to consolidate and have the sensors log back to 1 MySql server versus 6 individual servers. Also if it works to have them all log back to the main office would the best setup be to have individual snort databases etc and have apache etc setup accordingly. Any suggestions or recommendations would be greatly appreciated. Lance __________________________________ Do you Yahoo!? Yahoo! Finance Tax Center - File online. File on time. http://taxes.yahoo.com/filing.html ------------------------------------------------------- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Snort sensor setup Lance Boon (Mar 23)
- RE: Snort sensor setup Michael Steele (Mar 23)