Re: Running snort on a colo server.

[Roberto Suarez Soto <robe () alfa21 com>]

On Jan/10, Stuart Grimshaw wrote:

> I want to run snort on a remote server at the opposite end of the country, 
> and I'm just considering the best way to get the info from that sensor into 
> the local (mysql) db.

        In the firm I work for, we just get the tcpdump captures, gpg them,
and send them over mail. Then you can feed them to a local DB using snort
with the same configuration but ouputting to mysql. It's quite convenient, and
very scriptable :-)

-- 
Roberto Suarez Soto                                     Alfa21 Outsourcing
    robe () alfa21 com                               http://www.alfa21.com

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users