[Snort-users] Multiple Processes - Snort
sam at ...5202...
Thu Mar 14 06:51:34 EST 2002
Take a look at section 1.4.2 in the manual. Also, you may want to take a
look at the Barnyard program on www.snort.org as well.
On Thu, 14 Mar 2002, Sonika Malhotra wrote:
> Hello List,
> Is it possible that to decouple the logging and analysis stage of
> snort , i can run two different processes of snort. one in logger mode
> writing to tcpdump file and other in the NIDS mode to only analyze the
> file .
> i.e. one process will read the tcpdump file and other will write to
> just an idea to reduce packet loss..may be this would increase
> efficiency of snort in high speed N/w.
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> Snort-users list archive:
More information about the Snort-users