yackko
asked on
Snort to log all interfaces
Hello,
Just wondering if someone can assist.
I have snort on ubuntu and just wondering how I would set snort to log all Interaces? Is it turn on by default? I turn three interfaces on in promiscious mode. The other one is a management interface.
Thanks,
yackko
Just wondering if someone can assist.
I have snort on ubuntu and just wondering how I would set snort to log all Interaces? Is it turn on by default? I turn three interfaces on in promiscious mode. The other one is a management interface.
Thanks,
yackko
ASKER
Thanks for the reply PowerIT. So in saying, I will have to make a copy of the Snort folder, naming it Snort1, Snort2, Snort3, then create init.d entry for each to start when the machine is rebooted. So will barnyard be able to unify all three of them? I have barnyard on the first Snort.
Thanks,
yackko
Thanks,
yackko
Barnyard can do this, when you specify a specific PID for each Snort instance running.
kr, J.
kr, J.
ASKER
Sorry. I'm not that well verse in the PID portion of Linux. So will this be the init.d in which I create a .conf file and place it in the init.d? /etc/snort/snort1.conf, /etc/snort/snort2.conf, /etc/snort/snort3.conf and then place it into the init.d to run at boot up?
Thanks,
yackko
Thanks,
yackko
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
kr, J.