Snort mailing list archives

Advice on IDS across WANS


From: Patrick Marquetecken <patrick.marquetecken () pandora be>
Date: Mon, 20 Sep 2004 21:30:30 +0200

Hi,

I must control several snort machines across 3 sites.
SiteA the main site has 1 before the firewall, 1 in the DMZ.

These 2 snort machines are logging to mysql database and are connected with a read-only ethernet cable, and with a second network card to a fake lan with a console machine to check the logs with snort report.

SiteB and SiteC have both one snort, and are logging to a file.

What can you people on this list advise so that i can read all logs from all 5 machines from a console machine in SiteA on the best secure way, and if possible with snort report.

TIA
Patrick



-------------------------------------------------------
This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170
Project Admins to receive an Apple iPod Mini FREE for your judgement on
who ports your project to Linux PPC the best. Sponsored by IBM.
Deadline: Sept. 24. Go here: http://sf.net/ppc_contest.php
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: