Snort mailing list archives

Multiple Sensors


From: "Salil D." <salildumbre () rediffmail com>
Date: 25 Mar 2005 06:56:46 -0000

  
Hello Michael,

I still am not able to configure additional sensors.

Following line is from my snort.conf file,

"   output database: log, mysql, encoding=ascii user=XXXXXXX password=XXXXXX dbname=snort host=XXX.XXX.XXX.XXX    "

I have total 3 interface cards on the machine where snort is installed 
(all cards on same machine)

snort has detected one ip address out of the 3 , and set that as default sensor name.

In order to configure additional sensor, I have explicitly inserted a record in the sensor table with relevant field 
entries for other ip address.

Logged data carries information only about the default sensor.
I dont find any data sensed at the other sensor inserted later.

am I headed in the right way?

Kindly let me know of possible solution.

Thanks,

Salil.

Current thread: