Snort mailing list archives
Re: How to setup more than one sensor
From: Jose Maria Lopez <jkerouac () bgsec com>
Date: 10 Sep 2004 18:38:03 +0200
El jue, 09 de 09 de 2004 a las 23:03, Snort IDS escribió:
I'm trying to setup 3 sensors on my network and I have some doubts about central loging. Do I have to implement Universal Logging? Is there some configuration to be done on snort.conf? Thanks, Paulo.
You can use the three sensors logging as different sensors to the same database. ACID supports this kind of logging and let you choose between the three snort sensors. In snort.conf you just have to give a different hostname to each of the three sensors. -- Jose Maria Lopez Hernandez Director Tecnico de bgSEC jkerouac () bgsec com bgSEC Seguridad y Consultoria de Sistemas Informaticos http://www.bgsec.com ESPAÑA The only people for me are the mad ones -- the ones who are mad to live, mad to talk, mad to be saved, desirous of everything at the same time, the ones who never yawn or say a commonplace thing, but burn, burn, burn like fabulous yellow Roman candles. -- Jack Kerouac, "On the Road" ------------------------------------------------------- This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170 Project Admins to receive an Apple iPod Mini FREE for your judgement on who ports your project to Linux PPC the best. Sponsored by IBM. Deadline: Sept. 13. Go here: http://sf.net/ppc_contest.php _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- How to setup more than one sensor Snort IDS (Sep 09)
- Re: How to setup more than one sensor Jose Maria Lopez (Sep 10)
- <Possible follow-ups>
- RE: How to setup more than one sensor Harper, Patrick (Sep 09)