Re: SNORT-Multiple sensors+SNORBY

[Jeremy Hoel <jthoel () gmail com>]

You can easily run multiple sensors with snorby, it's designed to work that
way and it works well.  each sensor has a unique name and it's alerts are
sent to a central database via barnyard2.  Rule management can be done a
number of ways; i used to make rule changes on one server and had all the
others pull from that one server several times a day.

On Tue, Nov 25, 2014 at 1:51 PM, Mohammed Sahib <ms () borderlesssecurity com>
wrote:

> Hello all,
>
> Could you please let me know what is the best setup for multiple snort
> sensors and one SNORBY ?
>
> One another question: As I saw some sites they are using smoothsec as
> complete solution, is that a good option?
>
>
>
> Best Regards,
>
> Mo
>
>
> ------------------------------------------------------------------------------
> Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
> from Actuate! Instantly Supercharge Your Business Reports and Dashboards
> with Interactivity, Sharing, Native Excel Exports, App Integration & more
> Get technology previously reserved for billion-dollar corporations, FREE
>
> http://pubads.g.doubleclick.net/gampad/clk?id=157005751&iu=/4140/ostg.clktrk
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest
> Snort news!
------------------------------------------------------------------------------
Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
from Actuate! Instantly Supercharge Your Business Reports and Dashboards
with Interactivity, Sharing, Native Excel Exports, App Integration & more
Get technology previously reserved for billion-dollar corporations, FREE
http://pubads.g.doubleclick.net/gampad/clk?id=157005751&iu=/4140/ostg.clktrk

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!