I'm not too sure that I'm understanding correctly, but from what I gather
your thinking of starting multiple snort instances from 1 config file,
whereas you should be using 1 config file per node so you can properly
control each config. As such, the single line sensor_name= will suffice.
 
hth,
 
John

-----Original Message-----
From: Tim [mailto:twrbellsouth.net]
Sent: Thursday, September 12, 2002 3:30 PM
To: Snort-list
Subject: [Snort-users] Name that sensor

Hey ppl,
 
Making progress, I have Snort and Webmin on one box and ACID, Apache and
MySQL on another box. Everything is working as it should be. I would like to
be able to name the sensors so that when I look at ACID I would know to what
eth1, eth2 and eth3 subnets they belong to.
 
I have searched the archives and I have found that you can name the sensors
within the snort.conf file at the line 'output database' and adding
sensor_name=xyzabc. What if you have multiple sensors, how would you add the
sensor names? Does one add multiple lines with the sensor_name=sensor
appended on each line?
 
As always thanks in advance for the input ppl :-)
 
 
Tim -- Mia/Fla
Network Security Student

-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-userslists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]