[Snort-users] Secure Connection to transfer logs.

Randal T. Rioux randy at ...13561...
Thu Apr 29 14:09:15 EDT 2010


On Thu, April 29, 2010 12:54 pm, Garland, Ken R wrote:
> I'm setting up a Snorby front-end and planning to send the snort logs to
> it over the management interface. What would be considered a "best
> practice" in regards to securely transferring the data.
>
> Using syslog-ng and ssl?

I've used Stunnel for sending Barnyard(2) parsed unified(2) logs to a
remote database server. Always a nice added layer of security.

Randy






More information about the Snort-users mailing list