AW: Ignore ICMP ping

["Poppi, Sandro" <Sandro.Poppi () wacker com>]

Hi Math,

for that issue I use pass rules. Take a look into the Snort User's Manual
about writing pass rules, it's really not hard to do, and remember to use
the command line option -o on the snort command line.

You can also use BPF on the snort commandline as a second way. I think this
would increase snort's performance a little bit more instead of using pass
rules since those packets wouldn't reach snort at all while pass rules have
to be done by snort. I never did such a perfomance test, however, so this is
just a guess.

HTH,
Sandro
> Hello, i just wanna know if there is anyway to block ICMP PING from a 
> computer. I find how to ignore some tcp/udp ping by the preprocessor 
> command in Snort.conf, but can i just but another line to 
> disable some 
> server ICMP PING activity to be put in my alert log?
> A little help would be appreciate here if anybody got answer 
> ... I use 
> SnortSnarf and i dont wanna see those ping in my stats, so 
> must block in 
> snort...
>
> thx math
> Comp. Ing. ULaval
>
>
> _______________________________________________________________
>
> Don't miss the 2002 Sprint PCS Application Developer's Conference
> August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm
>
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

_______________________________________________________________

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users