Snort mailing list archives

portscan-ignorehosts question


From: "Joseph Inserra" <JInserra () Indeliq com>
Date: Mon, 3 Jun 2002 11:28:34 -0500

I've been trying to ignore portscans from two servers......My problem is that I can ignore only one of the two servers. 
 In the snort.conf file there is a portscan-ignorehosts section in the preprocessors.  My question is if you would like 
to ignore two hosts is there a delimiter character that I'm missing?  Or is there a better method to accomplish my 
objective.

Thanks in advance,
Joseph

_______________________________________________________________

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: