Snort mailing list archives
RE: General snort question
From: "McCash, John" <John.McCash () andrew com>
Date: Fri, 10 Sep 2004 14:39:49 -0500
Wendell, You only need all of those things on your back end database server. The sensors (as I recall) will require mysql to be installed, because the snort binary references the mysql library (unless you link it statically). You don't need an actual database installed on the sensor though. Just configure the database output plugins on all of your sensors to report to the database on your database/web server, and you're good to go. You don't have to run the database and the web servers on the same machine either, if you don't want to. John McCash -----Original Message----- From: snort-users-admin () lists sourceforge net [mailto:snort-users-admin () lists sourceforge net] On Behalf Of Wendell Smith Sent: Friday, September 10, 2004 2:31 PM To: snort-users () lists sourceforge net Subject: [Snort-users] General snort question Hey all! So I have just installed Snort/Acid on a test server of mine and for the most part, I'm really enjoying the functionality these two apps provide. I would like to deploy this IDS on my WAN exposed servers. My question to the list is: Can I do this in a way such that I don't have to install Snort, Acid, Apache, PHP, MySQL, etc on each of these WAN exposed machines. I saw that logsnorter provides a way to do this but that it is no longer supported. I have also read a little something about ethertaps but would rather not recompile the kernels of 5-8 machines. Thanks and regards, Wendell Smith ------------------------------------------------------- This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170 Project Admins to receive an Apple iPod Mini FREE for your judgement on who ports your project to Linux PPC the best. Sponsored by IBM. Deadline: Sept. 13. Go here: http://sf.net/ppc_contest.php _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users ------------------------------------------------------------------------------------------------ This message is for the designated recipient only and may contain privileged, proprietary, or otherwise private information. If you have received it in error, please notify the sender immediately and delete the original. Any unauthorized use of this email is prohibited. ------------------------------------------------------------------------------------------------ [mf2] ------------------------------------------------------- This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170 Project Admins to receive an Apple iPod Mini FREE for your judgement on who ports your project to Linux PPC the best. Sponsored by IBM. Deadline: Sept. 13. Go here: http://sf.net/ppc_contest.php _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- General snort question Wendell Smith (Sep 10)
- Re: General snort question Matt Kettler (Sep 10)
- <Possible follow-ups>
- Re: General snort question Lyndon Tiu (Sep 10)
- RE: General snort question McCash, John (Sep 10)
- Message not available
- RE: General snort question Wendell Smith (Sep 10)
- RE: General snort question Alex Butcher, ISC/ISYS (Sep 16)
- Message not available