03-19-2006 07:14 PM - edited 03-09-2019 02:19 PM
Hi,
Anybody experienced this scenario before?
The devide that I added into MARS (Snort 2.0) does not appear in the device list. I need to modify/delete it as there was a mistake in the device properties/info.
However, this device did appear in the network topology.
Any idea?
Thank you in advance.
AK
03-23-2006 07:41 PM
To add a Snort sensor you first need to create a SW host in the MARS (if it did not exist before) and then add to this host the Snort application and define the logging methond (pull or/and receive). Without the application or defined logging the SW host will not show up in the list of the devices / network topology.
You need to add the Snort to the "Existing SW host" now and your early defined SW host will show up.
03-23-2006 08:29 PM
Many thanks. Problem solved.
rgds,
AK
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide