Re: snort tcpdump binary file mirroing over network.

[Chris Green <cmg () sourcefire com>]

"samwun" <samwun () hgcbroadband com> writes:

> Dear all,
>
> I found that when I enabled tcpdump output module, binary file
> tcpdump.log is stored in the sensor. I would like to mirror a dir or
> file system which contains tcpdump.log file generated by Snort. I want
> to keep a copy of this file system (contains binary file tcpdump.log)
> stored in a remote server as well.

You could have 2 output lines and have the secondary one be over an
NFS mount or a smbmount.

You'll eventually run into random blocking on your network sensor but
it's the simplest solution
-- 
Chris Green <cmg () sourcefire com>
"I'm beginning to think that my router may be confused."


-------------------------------------------------------
This SF.net email is sponsored by: The SF.net Donation Program.
Do you like what SourceForge.net is doing for the Open
Source Community?  Make a contribution, and help us add new
features and functionality. Click here: http://sourceforge.net/donate/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users