problems with ignoring of hosts

["Victor Usjanov" <victor () decna com>]

Hello.

I am trying to ignore some hosts. Two of them are DNS servers, so i have
placed them in (var DNS_SERVERS),
but they still keep comming. I have tried both IP addresses and IP-adresses
with network bits
(xxx.xx.xx.xxx/24). Others went to (preprocessor
portscan-ignorehosts:) in a whitespace separated list, but they still keep
comming ( i do use ip with network bits there too).

Someone has an idea on what can be wrong, and how can i ignore those hosts?
It is 6 hosts i want to ignore. I get lots of ICMP Echo Replys from them.

Another thing - how do i ignore 127.0.0.1 and is it safe to do it or not ?

Thank you in advance.

--
Victor






_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users