[Snort-users] 2 sensors/1 interface?

Martin Olsson elof at ...6680...
Wed Oct 2 07:30:03 EDT 2002


On Wed, 25 Sep 2002, netsec novice wrote:
> Can someone help me understand why ACID reports that I have 2 sensors when I
> only have one interface and one instance of SNORT running that I know of?

Have you run snort with two different "output database"-configurations?
If you use sensor_name="x", and later change this to "y", ACID will think
you have two sensors.

/Martin





More information about the Snort-users mailing list