[Snort-users] Name that sensor
JHicks at ...5857...
Thu Sep 12 10:27:07 EDT 2002
I'm not too sure that I'm understanding correctly, but from what I gather
your thinking of starting multiple snort instances from 1 config file,
whereas you should be using 1 config file per node so you can properly
control each config. As such, the single line sensor_name= will suffice.
From: Tim [mailto:twr at ...163...]
Sent: Thursday, September 12, 2002 3:30 PM
Subject: [Snort-users] Name that sensor
Making progress, I have Snort and Webmin on one box and ACID, Apache and
MySQL on another box. Everything is working as it should be. I would like to
be able to name the sensors so that when I look at ACID I would know to what
eth1, eth2 and eth3 subnets they belong to.
I have searched the archives and I have found that you can name the sensors
within the snort.conf file at the line 'output database' and adding
sensor_name=xyzabc. What if you have multiple sensors, how would you add the
sensor names? Does one add multiple lines with the sensor_name=sensor
appended on each line?
As always thanks in advance for the input ppl :-)
Tim -- Mia/Fla
Network Security Student
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Snort-users