Snort mailing list archives
Re: multiple snort instances and snortcenter
From: Wes Young <wcyoung () buffalo edu>
Date: Wed, 20 Apr 2005 09:01:20 -0400
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Have you tried shutting down one of the agents and seeing if you can get the first one working correctly? Any fw running on the snortbox (or polly more appropriate, the snortcenter box)? John Hally wrote:
Hello All, Is anyone managing multiple snort instances on one server with snortcenter? I've tried to do this a couple of different ways with no success. Essentially I have a system running two instances that monitor the two legs of a tap (inbound/outbound) and I figured I'd just have to install separate snortcenter agents running on different ports, but even though I can connect to those agents directly with a browser, snortcenter can't. I even added separate ip addresses to the mgmt nic (virtuals) and still they show up red. I'm curious if anyone else has attempted this and got it to work. Thanks in advance!
- -- Wes Young Network Security Analyst University at Buffalo GPG Key: http://saxjazman9-security.blogspot.com/2005/01/gpg-key.html -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (GNU/Linux) iD8DBQFCZlKg1M5o0FsrrbERAu+nAJ9qCdBSRighKeZr9Z2WtSfW6ZsdywCeN0Yv LATd0l8CjkoO0wbIkL9Z2pQ= =4+O4 -----END PGP SIGNATURE----- ------------------------------------------------------- This SF.Net email is sponsored by: New Crystal Reports XI. Version 11 adds new functionality designed to reduce time involved in creating, integrating, and deploying reporting solutions. Free runtime info, new features, or free trial, at: http://www.businessobjects.com/devxi/728 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- multiple snort instances and snortcenter John Hally (Apr 20)
- Re: multiple snort instances and snortcenter Wes Young (Apr 20)
- RE: multiple snort instances and snortcenter Brian Jameson (Apr 21)