Adding additional sensors in Security Onion

[Zo La]

Hello,

Currently I have one sensor configured that is working fine. I will be adding 3 more sensors next week and was wondering what is the easiest way to add additional sensors? Do I have to go through the Security Onion setup again and choose new/additional interfaces or is there another way?

Thanks in advance.

[Matt Gregory]

Hi Zo,

By adding additional sensors, do you actually mean separate physical machines or VMs? It sounds like you might be trying to add additional sniffing interfaces to existing sensors.

At the moment there is no automated or easy way to add additional interfaces to an existing sensor. However, if you add a new box or VM, you can simply point the new sensor at your server during setup.

Matt

--
You received this message because you are subscribed to the Google Groups "security-onion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to security-onio...@googlegroups.com.
To post to this group, send email to securit...@googlegroups.com.
Visit this group at http://groups.google.com/group/security-onion.
For more options, visit https://groups.google.com/d/optout.

[Zo La]

Thanks, Matt. I meant adding new/additional sniffing interfaces.

On Friday, April 25, 2014 5:44:59 PM UTC-4, Matt wrote:
> Hi Zo,By adding additional sensors, do you actually mean separate physical machines or VMs? It sounds like you might be trying to add additional sniffing interfaces to existing sensors. At the moment there is no automated or easy way to add additional interfaces to an existing sensor. However, if you add a new box or VM, you can simply point the new sensor at your server during setup. MattOn Fri, Apr 25, 2014 at 3:50 PM, Zo La <zola...@gmail.com> wrote: Hello, Currently I have one sensor configured that is working fine. I will be adding 3 more sensors next week and was wondering what is the easiest way to add additional sensors? Do I have to go through the Security Onion setup again and choose new/additional interfaces or is there another way? Thanks in advance.-- You received this message because you are subscribed to the Google Groups "security-onion" group. To unsubscribe from this group and stop receiving emails from it, send an email to security-onio...@googlegroups.com. To post to this group, send email to securit...@googlegroups.com. Visit this group at http://groups.google.com/group/security-onion. For more options, visit https://groups.google.com/d/optout.

[Andrew Colfelt]

This is a current topic of discussion, with some more answers/help, here:
https://groups.google.com/forum/?hl=en#!topic/security-onion/0tSojBkokS4

[Zo La]

Thanks, Andrew.