Dane,

As soon as you start Snort, there will be a name added to the MySQL database
under the 'sensor' table. I believe the name comes from the 'sensor_name='
located in the output database line.

 -Michael

 Michael Steele | System Engineer / Support Technician
 mailto:michaelssilicondefense.com
 Silicon Defense: IDS solutions - http://www.silicondefense.com
 Snort: Open Source Network IDS - http://www.snort.org

-----Original Message-----
From: snort-users-adminlists.sourceforge.net
[mailto:snort-users-adminlists.sourceforge.net] On Behalf Of Dane Howard
Sent: Sunday, January 19, 2003 8:13 AM
To: 'Saúl Bósquez'; 'Snort User Groups'
Subject: RE: [Snort-users] acid console issue

I don't think you will show any sensors until you actually generate some
alerts. Acid pulls the sensors from the alerts it gets and since you
have no alerts, Acid doesn't know you have any sensors. Try to trip
some alerts to each sensor.

Dane

-----Original Message-----
From: snort-users-adminlists.sourceforge.net
[mailto:snort-users-adminlists.sourceforge.net] On Behalf Of Saúl
Bósquez
Sent: Friday, January 17, 2003 5:48 PM
To: Snort User Groups
Subject: [Snort-users] acid console issue

Im running the snortcenter console on my db box, and i select view
sensors
and i get the "sensor running" message in green and a Pid# 1862 ...
I went to the sensor box and wrote "ps -u root" to see my process list
and i
got a #1862 process named snort.. so that means that the sensor is up a
running but in the ACID console i get 0 sensors..

Sensors: 0
Unique Alerts: 0 ( 0 categories )
Total Number of Alerts: 0

-------------------------------------------------------
This SF.NET email is sponsored by: Thawte.com - A 128-bit supercerts
will
allow you to extend the highest allowed 128 bit encryption to all your
clients even if they use browsers that are limited to 40 bit encryption.

Get a guide
here:http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0030en
_______________________________________________
Snort-users mailing list
Snort-userslists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

-------------------------------------------------------
This SF.NET email is sponsored by: FREE SSL Guide from Thawte
are you planning your Web Server Security? Click here to get a FREE
Thawte SSL guide and find the answers to all your SSL security issues.
http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en
_______________________________________________
Snort-users mailing list
Snort-userslists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list

-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
_______________________________________________
Snort-users mailing list
Snort-userslists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]