[Snort-users] multiple snort instances and snortcenter

Wes Young wcyoung at ...12754...
Wed Apr 20 06:01:53 EDT 2005


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Have you tried shutting down one of the agents and seeing if you can get the first one working correctly?

Any fw running on the snortbox (or polly more appropriate, the snortcenter box)?

John Hally wrote:
> Hello All,
> 
>  
> 
> Is anyone managing multiple snort instances on one server with
> snortcenter?  I've tried to do this a couple of different ways with no
> success.  Essentially I have a system running two instances that monitor
> the two legs of a tap (inbound/outbound) and I figured I'd just have to
> install separate snortcenter agents running on different ports, but even
> though I can connect to those agents directly with a browser,
> snortcenter can't.  I even added separate ip addresses to the mgmt nic
> (virtuals) and still they show up red.  I'm curious if anyone else has
> attempted this and got it to work.
> 
>  
> 
> Thanks in advance!
> 

- --
Wes Young
Network Security Analyst
University at Buffalo
GPG Key: http://saxjazman9-security.blogspot.com/2005/01/gpg-key.html
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFCZlKg1M5o0FsrrbERAu+nAJ9qCdBSRighKeZr9Z2WtSfW6ZsdywCeN0Yv
LATd0l8CjkoO0wbIkL9Z2pQ=
=4+O4
-----END PGP SIGNATURE-----




More information about the Snort-users mailing list