[Snort-users] Performance Monitor
Budinich Galvez, Luis Alberto
BUDINIL at ...16601...
Fri Jun 6 02:33:17 EDT 2014
Shawn, that's what I'm looking for, but don't know how to config in my snort.conf file.
Jaime, good to know this but now I'm not able to use SNMP. First, I think I need to tune my configuration.
De: Jefferson, Shawn [mailto:Shawn.Jefferson at ...14448...]
Enviado el: jueves, 05 de junio de 2014 18:47
Para: Jefferson, Shawn; Budinich Galvez, Luis Alberto; snort-users at ...4422...urceforge.net
Asunto: RE: [Snort-users] Performance Monitor
And if performance specifically (sorry didn't quite understand), send your snort.stats to different files for each snort process? (that's what I do)
From: Jefferson, Shawn [mailto:Shawn.Jefferson at ...14448...]
Sent: June 05, 2014 9:38 AM
To: Budinich Galvez, Luis Alberto; snort-users at lists.sourceforge.net
Subject: Re: [Snort-users] Performance Monitor
Use different unified files for each process, set a unique name for each sensor in your barnyard2 conf. That will let you know what sensor the alert came from.
From: Budinich Galvez, Luis Alberto [mailto:BUDINIL at ...16601...]
Sent: June 05, 2014 8:25 AM
To: snort-users at lists.sourceforge.net<mailto:snort-users at ...3783...net>
Subject: [Snort-users] Performance Monitor
Hello guys, I'm wondering if it's posible (with performance monitor) to monitor the performance of different snorts that reads the same configuration file.
I'm running 4 snorts in the same machine. Each one is sniffing different networks, so now I'm seeing all output in the same file, but can't distinguish the values for my different networks. Is there a way for this?
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Snort-users