[Snort-users] Barnyard2 and multiple sensors
jesler at ...1935...
Thu Oct 21 00:18:23 EDT 2010
Run two instances of Barnyard as well.
On Oct 20, 2010, at 11:40 PM, Russell Fulton wrote:
> Hi Folks
> I am at the point where I need to have more than one snort instance running on a given sensor so we can take advantage of multiple CPUs and thus I will be producing multiple unified2 files on a sensor. Logically there is still just one sensor -- can barnyard2 merge input from more than one input file? I've googled and rtfm'ed and could not find anything that suggested that this is possible. I hope I missed something :)
More information about the Snort-users