ips-report ist not the ips daemon. this is only the reporting script which update the tables and reports at the asg with information from the ips logfile. If you disable IPS there is still content in /var/log/ips.log. The report script is only running on node1 because node2 will get the data from the synced postgres database
ips-report ist not the ips daemon. this is only the reporting script which update the tables and reports at the asg with information from the ips logfile. If you disable IPS there is still content in /var/log/ips.log. The report script is only running on node1 because node2 will get the data from the synced postgres database
ips-report ist not the ips daemon. this is only the reporting script which update the tables and reports at the asg with information from the ips logfile. If you disable IPS there is still content in /var/log/ips.log. The report script is only running on node1 because node2 will get the data from the synced postgres database
greetings
Andreas
ok I know that snort is the daemon for the IPS, and ips-reporter is to handle all stats and other stuff.. but was not sur if it is exepected to be shutdown also if we disable IPs...
