[Snort-users] Enterprise deployment

snortlst snortlst snortlst at ...125...
Fri Feb 1 07:59:27 EST 2002


Just want to make sure that I got it right:
In Toronto there is a snort machine that hosts mysql database.In ottawa
there is a snort machine that monitors their firewall.So you say that it is
possible to configure snort in ottawa to send updates to toronto database
without logging it locally on ottawa, is that right?
Could you tell me which line I should place in Ottawa's snort.conf to send
traffic to Toronto's centralized mysql database?
----- Original Message -----
From: "Frank" <la at ...4425...>
To: <snort-users at lists.sourceforge.net>
Sent: Thursday, January 31, 2002 4:44 PM
Subject: Re: [Snort-users] Enterprise deployment


> Have snort log to a database.
>
> You can do this with a nice web interface in Demarc and ACID.
>
>
> On Thu, 31 Jan 2002, snortlst snortlst wrote:
>
> > I run snort in our local office but we would like to try it for a
copuple of
> > other branches. Is it possible in some way to conifugre snort to monitor
> > remte sensors, like here in Toronto I would have a central console or
> > datatbase repository for the sensors running in Ottawa and Calgary?
>
>
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>




More information about the Snort-users mailing list