[Snort-users] adding another sensor

Jason Benway benwaynet at ...11827...
Tue Apr 26 13:54:01 EDT 2005


I'm adding my second snort install at one of our remote locations. I
want to log the snort information back to my local snort install so
base can see all the information.

I installed snort and snort-mysql on the remote linux box. Now I'm
assuming in my snort.conf I set the output to the mysql database on my
local snot box. Then all the snort data will be in the same database
and I can view it in base?

Where in the snort conf to I give the remote sensor a different name?

thanks,jb




More information about the Snort-users mailing list