Re: Snort in a H.A. environment.

["Federico Lombardo" <egopfe () hotmail com>]

And why ?

Is the only way to monitor trpassing traffic in real time.

Using span ports in a switch ?
I don't think this solution will solve my problems... I've a very high
traffic MAN.




----- Original Message -----
From: "Patrice Boulanger" <pboulanger () fr externall net>
To: "Federico Lombardo" <egopfe () hotmail com>
Sent: Monday, January 20, 2003 10:28 AM
Subject: RE: [Snort-users] Snort in a H.A. environment.


> Yes it's a stupid problem... I don't think it's a good idea to run snort
on
> your firewalls !
>
> -----Message d'origine-----
> De : snort-users-admin () lists sourceforge net
> [mailto:snort-users-admin () lists sourceforge net]De la part de Federico
> Lombardo
> Envoyé : lundi 20 janvier 2003 10:19
> À : snort-users () lists sourceforge net
> Objet : [Snort-users] Snort in a H.A. environment.
>
>
> Hi all, I've a stupid problem.
>
> I've in a production scenario a checkpoint Firewall-1 Cluster-XL Firewall
in
> Active-StandBy configuration.
>
>
> On the active Node-1 (active) i wanna run snort, and no problems with
this.
> The problema I want to solve is:
>
> How I can make possible to start snort on the other Node-2 when it became
> active, and how to stop snort in Node-1 when it became standby ???
>
>
> Every solution is appreciated.
>
>
> Regards,
>
>
> Federico
>
>
> -------------------------------------------------------
> This SF.NET email is sponsored by: FREE  SSL Guide from Thawte
> are you planning your Web Server Security? Click here to get a FREE
> Thawte SSL guide and find the answers to all your  SSL security issues.
> http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
This SF.NET email is sponsored by: FREE  SSL Guide from Thawte
are you planning your Web Server Security? Click here to get a FREE
Thawte SSL guide and find the answers to all your  SSL security issues.
http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users