[Snort-users] Problems about snort in enterprise environment
atul_iet at ...131...
Thu Nov 7 02:44:05 EST 2002
you can do it.
I have done it earlier with the mysql, webmin, acid on
one machine (linux v7.3) and the snort agent on
The only difference is that when you edit the
snort.conf file and change the output plugin settings,
you put the host as localhost. instead in this new
situation, you have to write the IP address of the
mysql server. That's all about. It will work.
I am not sure with the snort center but i have tested
it with webmin.
Tell me if some goes wrong.
Regards and have a nice day,
--- Andrea Iacopini <andrea.iacopini at ...7117...>
> Hi guys,
> I'm currently involved in a project which consist of
> Snort distribuited
> Snort will monitor different subnets, my idea was to
> build a
> "complete-sensor" ( snort, mysql, acid, webmin ) for
> every module,
> anyway in this design
> administrative people need to monitor four different
> My thought was: is possible to create a single
> system Snort installation
> with different ethernet devices that watch on
> different subnet and log
> on the same DB ?
> Some suggestions ? Links ?
> Andrea Iacopini - Networking Solutions
> andrea.iacopini at ...7117... - Mobile + 39 335
> REALTECH Italia S.p.A. - Technology drives
> Via Paolo di Dono, 73 - 00142 Roma, Italy
> Tel. +39 06 51.95.981, Fax. +39 06 22.214.171.124
> Real hackers don't die, just their TTL expires.
> This sf.net email is sponsored by: See the NEW Palm
> Tungsten T handheld. Power & Color in a compact
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or
> Snort-users list archive:
Do you Yahoo!?
U2 on LAUNCH - Exclusive greatest hits videos
More information about the Snort-users