Re: Heartbeat Question
LC Bruzenak <[email protected]>
| Newsgroups | gmane.comp.security.ids.prelude.user |
|---|---|
| Message-ID | <1209650326.6930.7.camel@homeserver> |
On Thu, 2008-05-01 at 09:55 -0400, Simon Smith wrote: > Greetings All, > Can anyone explain why snort agents are "missing" and not showing up as > green in my agents/heart beat section? My agents are in fact running and > are able to communicate directly to the prelude test server. Is there a > specific configuration that snort requires? Any advise would be helpful > and appreciated. > Are the times synced up? My experience was that if the time was off by more than say 30 seconds, the agents registered missing but the heartbeats were consistent. With a stable NTP server my issues went away. LCB. -- LC (Lenny) Bruzenak [email protected] _______________________________________________ Prelude-user site list [email protected] http://lists.prelude-ids.org/mailman/listinfo/prelude-user