Snort.org home  
Got Source? About Snort About Sourcefire Snort FAQ
Sourcefire Network Security - the creators of Snort

Snort Forums Archive

Archive Home » Linux » Snort listener installed across a WAN

Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.

[ Notice: Full Version of This Topic ]

Snort listener installed across a WAN


Posted by tsuter on December 08, 2005 04:58:19

I have a SNORT installation monitoring everything locally in one location. In a co-location, across a WAN, is it possible to install a remote listener to track what is going on there. Or would it be better to install another instance at the co-lo?

Posted by brevizniak on December 08, 2005 13:07:14

you could install a snort instance reporting back to your local DB. There are several docs on snort.org that detail how to do this.