Snort mailing list archives
Re: Barnyard2 issue w/unified2 ?
From: waldo kitty <wkitty42 () windstream net>
Date: Thu, 15 Aug 2013 16:59:41 -0400
On 8/15/2013 13:50, John Ives wrote:
Trying to output it to a postgres db. I did a quick look in the configuration, but I didn't see what option is used to differentiate the instances, so I suspect this is the root of my issue.
one major thing to note in the cases of running multiple instances of a program is the PID file they use... you definitely do not want more than one instance using the same PID file... how to indicate to the instance what its ID is in addition to its normal "ID" is something else altogether... some apps have provisions for this while others do not... for example, in our environment, snort sniffing the ppp0 interface has a PID file name of snort_ppp0.pid... on the eth0 interface, it is snort_eth0.pid... same for the other interfaces... -- NOTE: No off-list assistance is given without prior approval. Please keep mailing list traffic on the list unless private contact is specifically requested and granted. ------------------------------------------------------------------------------ Get 100% visibility into Java/.NET code with AppDynamics Lite! It's a free troubleshooting tool designed for production. Get down to code-level detail for bottlenecks, with <2% overhead. Download for free and get started troubleshooting in minutes. http://pubads.g.doubleclick.net/gampad/clk?id=48897031&iu=/4140/ostg.clktrk _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- Re: Barnyard2 issue w/unified2 ?, (continued)
- Message not available
- Re: Barnyard2 issue w/unified2 ? beenph (Aug 10)
- Re: Barnyard2 issue w/unified2 ? Jeff Kell (Aug 13)
- Re: Barnyard2 issue w/unified2 ? Jen Andre (Aug 13)
- Re: Barnyard2 issue w/unified2 ? beenph (Aug 15)
- Re: Barnyard2 issue w/unified2 ? waldo kitty (Aug 13)
- Re: Barnyard2 issue w/unified2 ? Jeff Kell (Aug 13)
- Re: Barnyard2 issue w/unified2 ? John Ives (Aug 15)
- Re: Barnyard2 issue w/unified2 ? beenph (Aug 15)
- Re: Barnyard2 issue w/unified2 ? John Ives (Aug 15)
- Re: Barnyard2 issue w/unified2 ? waldo kitty (Aug 15)
- Re: Barnyard2 issue w/unified2 ? John Ives (Aug 15)
- Re: Barnyard2 issue w/unified2 ? waldo kitty (Aug 15)