[Snort-users] Multiple Processes - Snort

Sam sam at ...5202...
Thu Mar 14 06:51:34 EST 2002


Take a look at section 1.4.2 in the manual.  Also, you may want to take a
look at the Barnyard program on www.snort.org as well.

-Sam

On Thu, 14 Mar 2002, Sonika Malhotra wrote:

> Hello List,
>     Is it possible that to decouple the logging and analysis stage of
> snort , i can run two different processes of snort. one in logger mode
> writing to tcpdump file and other in the NIDS mode to only analyze the
> file .
>     i.e. one process will read the tcpdump file and other will write to
> it.
>     just an idea to reduce packet loss..may be this would increase
> efficiency of snort in high speed N/w.
> thanx.
> sm.
>
>
>
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>





More information about the Snort-users mailing list