Running multiple Barnyards (was Re: Can Snort monitor multiple VLANs?)

["Andrew R. Baker" <andrewb () snort org>]

Peter Barton wrote:
> My question to everyone is, what if you use Barnyard to write to MySql
> and have Snort just write to binary files.  I still have multiple
> instances of Snort running, but I can only seem to get one instance of
> Barnyard running.  Is there a trick to this or am I just going about
> this the wrong way?

You should run multiple Barnyards if you are running multiple Snorts.
Are you using the -X option on the command line to specify different PID 
files for each Barnyard process?  I have succesfully run around a 
hundred Barnyards on one system as part of testing.

-A



-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users