Re: [Snort-users] adding another sensor

Jason Benway <benwaynet@gmail.com> writes:

> I'm adding my second snort install at one of our remote locations. I
> want to log the snort information back to my local snort install so
> base can see all the information.
>
> I installed snort and snort-mysql on the remote linux box. Now I'm
> assuming in my snort.conf I set the output to the mysql database on my
> local snot box. Then all the snort data will be in the same database
> and I can view it in base?
>
> Where in the snort conf to I give the remote sensor a different name?
>
> thanks,jb

adjust for mysql as appropriate:

output database: log, postgresql, user=snort_db_user dbname=snort password=******* host=<remotehost> sensor_name=<sensorname>

cheers,
Jamie
--
James Riden / j.riden@massey.ac.nz / Systems Security Engineer
Information Technology Services, Massey University, NZ.
GPG public key available at: http://www.massey.ac.nz/~jriden/




-------------------------------------------------------
SF.Net email is sponsored by: Tell us your software development plans!
Take this survey and enter to win a one-year sub to SourceForge.net
Plus IDC's 2005 look-ahead and a copy of this survey
Click here to start! http://www.idcswdc.com/cgi-bin/survey?id=105hix
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users