Snort mailing list archives
how to ignore scans from trusted hosts?
From: Roeland Weve <roeland () office netland nl>
Date: Thu, 31 May 2001 15:54:03 +0200
I've seen it in a snort.conf version where the trusted host 'www.snort.org' was ignored from getting alerts from. Now I'm getting alerts from some trusted hosts and want to ignore them by putting them in the snort.conf file. I forgot how to do that, is it still possible and how can I do it? Thanks Roeland _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: http://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- how to ignore scans from trusted hosts? Roeland Weve (May 31)
- <Possible follow-ups>
- Re: how to ignore scans from trusted hosts? Neil Dickey (May 31)
- Re: how to ignore scans from trusted hosts? Tony Lill (Jun 01)
- Re: how to ignore scans from trusted hosts? Phil Wood (Jun 01)
- Re: how to ignore scans from trusted hosts? Tony Lill (Jun 01)
- Re: how to ignore scans from trusted hosts? Neil Dickey (Jun 01)
- Re: how to ignore scans from trusted hosts? Tony Lill (Jun 01)