Snort mailing list archives
Patch to have unified2 outputs for multiple snort instances
From: Guido Hungerbuehler <guh () open ch>
Date: Thu, 14 Feb 2013 16:26:27 +0100
HiI just wrote a patch which allows multiple snort instances to run in parallel. With this patch it is possible to only have one config file and still the unified2 output is directed to multiple files, each with the instance identifier.
Just use the -G argument to specify the instance id. cheers guido
Attachment:
multi_instance.patch
Description:
------------------------------------------------------------------------------ Free Next-Gen Firewall Hardware Offer Buy your Sophos next-gen firewall before the end March 2013 and get the hardware for free! Learn more. http://p.sf.net/sfu/sophos-d2d-feb
_______________________________________________ Snort-devel mailing list Snort-devel () lists sourceforge net https://lists.sourceforge.net/lists/listinfo/snort-devel Archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel Please visit http://blog.snort.org for the latest news about Snort!
Current thread:
- Patch to have unified2 outputs for multiple snort instances Guido Hungerbuehler (Feb 14)
- Re: Patch to have unified2 outputs for multiple snort instances Russ Combs (Feb 14)
- Re: Patch to have unified2 outputs for multiple snort instances Brad Tilley (Feb 15)