Snort and CARP sync



  • I have a CARP setup (that works) and have installed the snort package and got it working on both master and slave but the sync thing wont work I get a message saying

    php: : New alert found: An error code was received while attempting Snort XMLRPC sync with https://10.0.0.2:443 - Code 1: Unknown method

    10.0.0.2 is the CARP (crossover cable) address of the slave machine (master is 10.0.0.1)

    have I missed something, is there a way to set them up to make this work??

    Thanks



  • This requires a recent snapshot.  Please update to a newer snapshot.


Log in to reply