RE: [Snort-users] General snort question

Wendell,
You only need all of those things on your back end database
server. The sensors (as I recall) will require mysql to be installed,
because the snort binary references the mysql library (unless you link
it statically). You don't need an actual database installed on the
sensor though. Just configure the database output plugins on all of your
sensors to report to the database on your database/web server, and
you're good to go. You don't have to run the database and the web
servers on the same machine either, if you don't want to.
John McCash

-----Original Message-----
From: snort-users-admin@lists.sourceforge.net
[mailto:snort-users-admin@lists.sourceforge.net] On Behalf Of Wendell
Smith
Sent: Friday, September 10, 2004 2:31 PM
To: snort-users@lists.sourceforge.net
Subject: [Snort-users] General snort question

Hey all!

So I have just installed Snort/Acid on a test server of mine and for the
most part, I'm really enjoying the functionality these two apps provide.
I would like to deploy this IDS on my WAN exposed servers.=20

My question to the list is:

Can I do this in a way such that I don't have to install Snort, Acid,
Apache, PHP, MySQL, etc on each of these WAN exposed machines.

I saw that logsnorter provides a way to do this but that it is no longer
supported. I have also read a little something about ethertaps but would
rather not recompile the kernels of 5-8 machines.

Thanks and regards,

Wendell Smith



-------------------------------------------------------
This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170
Project Admins to receive an Apple iPod Mini FREE for your judgement on
who ports your project to Linux PPC the best. Sponsored by IBM.=20
Deadline: Sept. 13. Go here: http://sf.net/ppc_contest.php
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...=3Dsnort-users

---------------------------------------------------------------------------=
---------------------
This message is for the designated recipient only and may
contain privileged, proprietary, or otherwise private information. =20
If you have received it in error, please notify the sender
immediately and delete the original. Any unauthorized use of
this email is prohibited.
---------------------------------------------------------------------------=
---------------------
[mf2]


-------------------------------------------------------
This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170
Project Admins to receive an Apple iPod Mini FREE for your judgement on
who ports your project to Linux PPC the best. Sponsored by IBM.
Deadline: Sept. 13. Go here: http://sf.net/ppc_contest.php
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users