[Snort-users] Remote sensor startup issue.

mdpeters michael.peters at ...10939...
Tue Feb 15 05:15:18 EST 2005

Are you suggesting that a remote Snort sensor can not send alerts to a 
central Snort MySQL system? It seems to me that all I need to do is resolve 
the startup malfunction. It logs just fine when I manually fire the remote 
sensor up.

I have no experience with Barnyard. Would I run a MySQL database on the 
sensor and use Barnyard to send alerts to the central system?

----- Original Message ----- 
From: "Leon Ward" <leon at ...9950...>
To: "mdpeters" <michael.peters at ...10939...>
Sent: Tuesday, February 15, 2005 5:23 AM
Subject: Re: [Snort-users] Remote sensor startup issue.

> Look at barnyard, its a good move.
> -Leon
> On Mon, 2005-02-14 at 16:38 -0500, mdpeters wrote:
>> I have a remote Snort sensor that upon system boot, will not start the 
>> Snort
>> process. This system is configured to send it's alert data to a central
>> snort system's MySQL database. I can run the same startup script and it 
>> all
>> works fine. I have tried moving the start order without success. I assume
>> this does not start because of the remote database connection.
>> Does anyone have a tip for fixing this? Do I need to run MySQL on the 
>> remote
>> system as well and log to both?
>> Best regards,
>> Michael
>> -------------------------------------------------------
>> SF email is sponsored by - The IT Product Guide
>> Read honest & candid reviews on hundreds of IT Products from real users.
>> Discover which products truly live up to the hype. Start reading now.
>> http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
>> _______________________________________________
>> Snort-users mailing list
>> Snort-users at lists.sourceforge.net
>> Go to this URL to change user options or unsubscribe:
>> https://lists.sourceforge.net/lists/listinfo/snort-users
>> Snort-users list archive:
>> http://www.geocrawler.com/redir-sf.php3?list=snort-users
> -- 

More information about the Snort-users mailing list