[Snort-users] Multiple Barnyard questions
Andrew R. Baker
andrewb at ...950...
Mon Jun 30 05:14:15 EDT 2003
Gordon Cunningham wrote:
> I’ve got a machine with several NICs running multiple instances of snort,
> successfully logging to separate uni alert and log files. However, I can’t
> seem to run multiple instances of barnyard with multiple conf files to get
> those logs entered into SQL for ACID reporting, etc. Is there some trick I’
> m missing, or should I have all snort instances report to the same log
> files? Details upon request.
Use the "-X <pidfile>" command line option with Barnyard to get it to
use a different PID file for each instance.
More information about the Snort-users