Re: ignoring unwanted traffic comming from source

[John Sage <jsage () finchhaven com>]

Emre:

Do you have $HOME_NET set in any way?

What snort version/rule sets are you using?

What command line?

What (if any..) edits to snort.conf?

- John

Emre Yildirim wrote:

> How do I ignore traffic going to a particulat host?  i.e. the interface snort listens
> to hasthe IP 12.34.56.78 and snort keeps generating alerts where 12.34.56.78 is the source.
>  I'dlike you ignore that.  Is there a way?




_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users