Snort mailing list archives
RE: Only monitor specified ip's
From: "Eisenhaur, Gerald" <GEisenhaur () diop com>
Date: Wed, 13 Feb 2002 15:42:14 -0500
Try: var HOME_NET [10.0.0.1/32,10.0.0.2/32,10.0.0.3/32] -----Original Message----- From: Glenn E. Bailey III [mailto:gbailey () sprocketdata com] Sent: Wednesday, February 13, 2002 3:08 PM To: Snort-Users Subject: [Snort-users] Only monitor specified ip's I have looked through the docs & faq's for a while now and have come up w/nothing. Basically, I want Snort to ONLY monitor ip's I specify. Is this easily done without re-writing all the rules? I though this might work: var HOME_NET [10.0.0.1,10.0.0.2,10.0.0.3] but it doesn't seem to .. Any suggestions? . Glenn E. Bailey III . Network Solutions Developer . Sprocket Data, Inc. . 214-343-8300 x 203 . http://www.sprocketdata.com _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users ##################################################################################### Note: This message is for the named person's use only. It may contain confidential, proprietary or legally privileged information. No confidentiality or privilege is waived or lost by any transmission errors. If you receive this message in error, please immediately delete it and all copies of it from your system, destroy any hard copies of it and notify the sender. You must not, directly or indirectly, use, disclose, distribute, print, or copy any part of this message if you are not the intended recipient. Diversified Optical Products and any of its subsidiaries each reserve the right to monitor all e-mail communications through its networks. Any views expressed in this message are those of the individual sender, except where the message states otherwise and the sender is authorized to state them to be the views of any such entity. Thank You. ##################################################################################### _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Only monitor specified ip's Glenn E. Bailey III (Feb 13)
- Re: Only monitor specified ip's Erek Adams (Feb 13)
- RE: Only monitor specified ip's Jeff Jennings (Feb 13)
- <Possible follow-ups>
- RE: Only monitor specified ip's Eisenhaur, Gerald (Feb 13)
- RE: Only monitor specified ip's Glenn E. Bailey III (Feb 13)