Post subject: Central Logging, again oh..and signatures! Posted: Jul 22, 2006 - 03:08 AM
Joined: Jul 22, 2006
Posts: 4
Status: Offline
I have been reading out on Winsnort for quite a while and b/c of the forums, support tools I have snort up and running.
What I am trying to accomplish is a two part fix. First of all this is in a test enviroment. I have snort, MySql, BASE running on box A, I have BASE and MySql running on Box B.
The goal is to have multiple sensors report to our central logging server.
The problem I am having is that in the signature column on Base, both machines, it says 0 all the way down. Nothing is showing up and I can't figure out why.
The second problem is that our Central Logging server is showing 50% of the alerts coming from itself. How do you get the central logging server to stop logging itself all the time?
Any help would be very much appreciated! thanks
Morpheus
Post subject: RE: Central Logging, again oh..and signatures! Posted: Jul 22, 2006 - 05:34 PM
Site Admin
Joined: Sep 04, 2003
East Coast - USA
Posts: 1462
Location: East Coast - USA
Status: Offline
Go check out our companion documents in the guides area.