RE: [Snort-users] snort-mysql sensors

If you change the interface, like switching from eth0 to eth1, or change the IP 
address you will end up with multiple sensor entries.  I don't think you can 
fix it via BASE. but you might be able to go into to mysql and change the table 
directly.

        -----Original Message----- 
        From: snort-users-admin@lists.sourceforge.net on behalf of Mohamed 
Eldesoky 
        Sent: Tue 06/21/2005 10:01 AM 
        To: Snort Users 
        Cc: 
        Subject: [Snort-users] snort-mysql sensors
        
        

        At last I have run snort-mysql and BASE on my bridged firewall.
        I have two interfaces working, but BASE reports that I have three 
sensors ??
        Howcome ???
        
        --
        Mohamed Eldesoky
        www.eldesoky.net
        RHCE
        
        
        -------------------------------------------------------
        SF.Net email is sponsored by: Discover Easy Linux Migration Strategies
        from IBM. Find simple to follow Roadmaps, straightforward articles,
        informative Webcasts and more! Get everything you need to get up to
        speed, fast. http://ads.osdn.com/?ad_idt77&alloc_id492&op=ick
        _______________________________________________
        Snort-users mailing list
        Snort-users@lists.sourceforge.net
        Go to this URL to change user options or unsubscribe:
        https://lists.sourceforge.net/lists/listinfo/snort-users
        Snort-users list archive:
        http://www.geocrawler.com/redir-sf.php3?list=ort-users
        

ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÒó^µéX¬²š'²ŠÞu¼ÿ+¢÷««2.)îÄÈ­«b¢t­­«^‚'¬~º&
 
ÿ)Ý)©•ëh~‰e£hiÙ¦Ï좂_¢¼­Ö¶'%zÏâú+™«b½åžmƶÆvj+{ñžµëÞ+aŠx2¢éÞyÛhën¦Ú,¥çýö¬·øm¶Ÿÿý§lþ‹Ÿ÷(›ÿÚwøïöÿ‰ëvþŠrXœ“ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿJz+·û¬z»&j)bž
       
b²Ô¢»ÿºÇ³ùb²Ûÿ²‹«qçè®ÿëF¢Ú-†+D»hr§ë¬zº)¶*'²ŠîžË±Êâmïá¶ÚlÿÿåŠËlþÊ.­Ç¢¸þw­þX¬¶ÏåŠËbú?²z+·û¬z»žŠíþë®Éb²Ör¯{øm¶Ÿÿÿ
0þ¨r¶°•êÿr‰¿­çb¯ûþ˜ißùb²žŠíþë