Snort mailing list archives
RE: Problems.
From: "Johnson, David" <DJohnson () IronMountain com>
Date: Mon, 25 Jun 2001 07:46:00 -0400
You need to change your CIDR to /24. Otherwise the program is looking only for the address 217.106.127.0 (with 32-bit net mask) -----Original Message----- From: Tolpanov, Dmitry [mailto:tdn () stack ru] Sent: Monday, June 25, 2001 2:12 AM To: 'snort-users () lists sourceforge net' Subject: [Snort-users] Problems. Hi, all. I use snort-1.7. In my snort.conf there is line: preprocessor portscan-ignorehosts: 217.106.127.X/32 Nevertheless it looks like this option doesn't work. May be i must change something else? I've used following lines with the same result var DNS_SERVERS [217.106.127.X/32] preprocessor portscan-ignorehosts: $DNS_SERVERS Some additions: I run snort with -c,-l,-D,-p options. Snort is on the same 217.106.127.X/32. My uname: FreeBSD online.tomsk.net 2.2.8-19990102-SNAP FreeBSD 2.2.8-19990102-SNAP #0: Wed Dec 8 17:13:47 KRS 1999 root () online tomsk net:/usr/src/sys/compile/ONLINE i386 Thanks for future help. :)) Dmitry. _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: http://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: http://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Problems. Tolpanov, Dmitry (Jun 25)
- <Possible follow-ups>
- RE: Problems. Johnson, David (Jun 25)
- RE: Problems. Tolpanov, Dmitry (Jun 25)