[Snort-users] Snort sensor agent
sireesha gaddipati
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
Hi,
I am running two snort sensors on the same machine. Can I use the same snort sensor agent for both of them? If not, how can I do this?
Thanks
Sireesha
Catch all the cricket action. Download Yahoo! Score tracker
--0-1165295350-1052926666=:54199
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
<DIV>Hi,</DIV>
<DIV>I am running two snort sensors on the same machine. Can I use the same snort sensor agent for both of them? If not, how can I do this?</DIV>
<DIV> </DIV>
<DIV>Thanks</DIV>
<DIV>Sireesha</DIV>
<DIV> </DIV>
<DIV> </DIV><p><img src="http://sg.yimg.com/i/aa/icons/28/cricket.gif" height=28 width=28>
Catch all the cricket action. Download <a href="http://in.sports.yahoo.com/cricket/tracker.html" target="_blank">
Yahoo! Score tracker</a>
--0-1165295350-1052926666=:54199--
-------------------------------------------------------
Enterprise Linux Forum Conference & Expo, June 4-6, 2003, Santa Clara
The only event dedicated to issues related to Linux enterprise solutions
www.enterpriselinuxforum.com
_______________________________________________
Snort-users mailing list
Snort...@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
larc
different network interface for each snort sensor there is no problem,
if you want to use different sensor with the same interface you have to
use the -R option in the command line field.
Stefan
sireesha gaddipati wrote:
> Hi,
> I am running two snort sensors on the same machine. Can I use the same
> snort sensor agent for both of them? If not, how can I do this?
>
> Thanks
> Sireesha
>
>
>
> Catch all the cricket action. Download Yahoo! Score tracker
> <http://in.sports.yahoo.com/cricket/tracker.html>
sireesha gaddipati
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
Yeah I am running snort different interfaces. - eth0 and eth1.
First I installed snort center agent for eth0 sensor , I am promted for IP address = (Your sensors Management IP)
I gave my eth0's IP address. It worked fine.
Is that address the interface's address on which snort sensor is sniffing?
Do I need to change anything in miniserv.conf inorder to add second one?
Thanks.
Sireesha
larc <la...@pandora.be> wrote:
Yes you can run more then one snort sensor with one agent. If you use a
different network interface for each snort sensor there is no problem,
if you want to use different sensor with the same interface you have to
use the -R option in the command line field.
Stefan
sireesha gaddipati wrote:
> Hi,
> I am running two snort sensors on the same machine. Can I use the same
> snort sensor agent for both of them? If not, how can I do this?
>
> Thanks
> Sireesha
>
>
>
> Catch all the cricket action. Download Yahoo! Score tracker
>
>
-------------------------------------------------------
Enterprise Linux Forum Conference & Expo, June 4-6, 2003, Santa Clara
The only event dedicated to issues related to Linux enterprise solutions
www.enterpriselinuxforum.com
_______________________________________________
Snort-users mailing list
Snort...@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
Catch all the cricket action. Download Yahoo! Score tracker
--0-1393878033-1052931607=:45387
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
<DIV>
<DIV>
<DIV>Yeah I am running snort different interfaces. - eth0 and eth1.</DIV>
<DIV> </DIV>
<DIV>First I installed snort center agent for eth0 sensor , I am promted for
<DIV> IP address = (Your sensors Management IP)</DIV>
<DIV>I gave my eth0's IP address. It worked fine.</DIV>
<DIV> </DIV>
<DIV>Is that address the interface's address on which snort sensor is sniffing?</DIV>
<DIV> </DIV>
<DIV>Do I need to change anything in miniserv.conf inorder to add second one?</DIV>
<DIV> </DIV>
<DIV>Thanks.</DIV>
<DIV>Sireesha</DIV><BR><BR><B><I>larc <la...@pandora.be></I></B> wrote:</DIV>
<BLOCKQUOTE style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #1010ff 2px solid">Yes you can run more then one snort sensor with one agent. If you use a <BR>different network interface for each snort sensor there is no problem, <BR>if you want to use different sensor with the same interface you have to <BR>use the -R option in the command line field.<BR><BR>Stefan<BR><BR>sireesha gaddipati wrote:<BR><BR>> Hi,<BR>> I am running two snort sensors on the same machine. Can I use the same <BR>> snort sensor agent for both of them? If not, how can I do this?<BR>> <BR>> Thanks<BR>> Sireesha<BR>> <BR>> <BR>><BR>> Catch all the cricket action. Download Yahoo! Score tracker <BR>> <HTTP: tracker.html cricket in.sports.yahoo.com><BR>><BR><BR><BR><BR>-------------------------------------------------------<BR>Enterprise Linux Forum Conference & Expo, June 4-6, 2003, Santa Clara<BR>The only event dedicated to issues related to Linux enterprise
solutions<BR>www.enterpriselinuxforum.com<BR><BR>_______________________________________________<BR>Snort-users mailing list<BR>Snort...@lists.sourceforge.net<BR>Go to this URL to change user options or unsubscribe:<BR>https://lists.sourceforge.net/lists/listinfo/snort-users<BR>Snort-users list archive:<BR>http://www.geocrawler.com/redir-sf.php3?list=snort-users</BLOCKQUOTE></DIV></DIV><p><img src="http://sg.yimg.com/i/aa/icons/28/cricket.gif" height=28 width=28>
Catch all the cricket action. Download <a href="http://in.sports.yahoo.com/cricket/tracker.html" target="_blank">
Yahoo! Score tracker</a>
--0-1393878033-1052931607=:45387--