Snort mailing list archives
RE: SnortCenter Multiple Local sensors
From: "Read, Andrew" <andrew.read () nz teletech com>
Date: Wed, 5 Mar 2003 11:42:14 +1300
I've removed the addtional NIC, and entries in Snortcenter. This was to revert back to my previous (functioning) setup. Unfortunaly there are still no entries in acid, though the alert and portscan logs are growing. Any ideas, a reinstall is next on my "troubleshooting" list. Andrew -----Original Message----- From: Read, Andrew [mailto:andrew.read () nz teletech com] Sent: Wednesday, 5 March 2003 9:02 a.m. To: 'snort-users () lists sourceforge net' Subject: [Snort-users] SnortCenter Multiple Local sensors Hi All, I've been searching for information regarding running 2 local sensors on the same box as my SnortCenter/Acid console. I have 1 sensor working fine. When I add the second sensor, I get no traffic logged (to the DB) from either. Though I can see an alert file and portscan file growing in my /var/log/snort directory. I did not add a second snortsensor instance. I just added another sensor in Snortcenter specifing eth2. I can push policies and restart both sensors fine, just no data heading for the database. Any suggestions? Andrew ************************************************************ The information contained in this email is confidential and may be legally privileged. If the reader of this message is not the intended recipient you are hereby notified that any use, dissemination, distribution, or reproduction of this message is prohibited. If you have received this message in error please notify the sender and delete all copies of this message including any attachments it may contain. The email or its content does not necessarily represent the views of the company. ************************************************************ ------------------------------------------------------- This SF.net email is sponsored by: Etnus, makers of TotalView, The debugger for complex code. Debugging C/C++ programs can leave you feeling lost and disoriented. TotalView can help you find your way. Available on major UNIX and Linux platforms. Try it free. www.etnus.com _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users ************************************************************ The information contained in this email is confidential and may be legally privileged. If the reader of this message is not the intended recipient you are hereby notified that any use, dissemination, distribution, or reproduction of this message is prohibited. If you have received this message in error please notify the sender and delete all copies of this message including any attachments it may contain. The email or its content does not necessarily represent the views of the company. ************************************************************ ------------------------------------------------------- This SF.net email is sponsored by: Etnus, makers of TotalView, The debugger for complex code. Debugging C/C++ programs can leave you feeling lost and disoriented. TotalView can help you find your way. Available on major UNIX and Linux platforms. Try it free. www.etnus.com _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- SnortCenter Multiple Local sensors Read, Andrew (Mar 04)
- <Possible follow-ups>
- RE: SnortCenter Multiple Local sensors Read, Andrew (Mar 04)