Re: multiple snort instances and snortcenter

[Wes Young <wcyoung () buffalo edu>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Have you tried shutting down one of the agents and seeing if you can get the first one working correctly?

Any fw running on the snortbox (or polly more appropriate, the snortcenter box)?

John Hally wrote:
> Hello All,
>
>  
>
> Is anyone managing multiple snort instances on one server with
> snortcenter?  I've tried to do this a couple of different ways with no
> success.  Essentially I have a system running two instances that monitor
> the two legs of a tap (inbound/outbound) and I figured I'd just have to
> install separate snortcenter agents running on different ports, but even
> though I can connect to those agents directly with a browser,
> snortcenter can't.  I even added separate ip addresses to the mgmt nic
> (virtuals) and still they show up red.  I'm curious if anyone else has
> attempted this and got it to work.
>
>  
>
> Thanks in advance!

- --
Wes Young
Network Security Analyst
University at Buffalo
GPG Key: http://saxjazman9-security.blogspot.com/2005/01/gpg-key.html
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFCZlKg1M5o0FsrrbERAu+nAJ9qCdBSRighKeZr9Z2WtSfW6ZsdywCeN0Yv
LATd0l8CjkoO0wbIkL9Z2pQ=
=4+O4
-----END PGP SIGNATURE-----


-------------------------------------------------------
This SF.Net email is sponsored by: New Crystal Reports XI.
Version 11 adds new functionality designed to reduce time involved in
creating, integrating, and deploying reporting solutions. Free runtime info,
new features, or free trial, at: http://www.businessobjects.com/devxi/728
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users