Snort mailing list archives
Re: Curiosity about lost connectivity
From: Michael Boman <michael.boman () securecirt com>
Date: Fri, 14 Mar 2003 21:45:12 +0800
On Fri, Mar 14, 2003 at 11:16:27AM +0100, Andrea Iacopini wrote:
Hi, I've set up a snort distribuited architecture, 4 sensor and a management system. My question is: what happen to sensor when tries to write logs on the remote management but there's no connectivity due a various problems ? Do I lose the logs ? Or Snort can have some queue ? Does exists some settings to implement some settings te prevent this ? Regards, A.
You will lose then. Use barnyard. Best regards Michael Boman -- Michael Boman Security Architect, SecureCiRT Pte Ltd http://www.securecirt.com
Attachment:
_bin
Description:
Current thread:
- Curiosity about lost connectivity Andrea Iacopini (Mar 14)
- Re: Curiosity about lost connectivity Michael Boman (Mar 14)