Snort mailing list archives

Re: Curiosity about lost connectivity


From: Michael Boman <michael.boman () securecirt com>
Date: Fri, 14 Mar 2003 21:45:12 +0800

On Fri, Mar 14, 2003 at 11:16:27AM +0100, Andrea Iacopini wrote:
Hi,
I've set up a snort distribuited architecture, 4 sensor and a management
system.
My question is: what happen to sensor when tries to write logs on the
remote management but there's no connectivity due
a various problems ? Do I lose the logs ? Or Snort can have some queue ?
Does exists some settings to implement some settings te prevent this ?
Regards,

A.

You will lose then. Use barnyard.

Best regards
 Michael Boman

-- 
Michael Boman
Security Architect, SecureCiRT Pte Ltd
http://www.securecirt.com

Attachment: _bin
Description:


Current thread: