Re: SNMP EXCLUDE

["Onie Camara" <neil () restricted dyndns org>]

Hi Ganu,

Use pass instead of alert.

----- Original Message ----- 
From: "Ganu Skop" <skopganu () yahoo com>
To: <snort-users () lists sourceforge net>
Sent: Friday, April 05, 2002 5:38 AM
Subject: [Snort-users] SNMP EXCLUDE


> hi there,
> my isp is running mrtg therefore there's always SNMP
> request udp alert.
> therefore is there anyway that i wanna exclude known
> SNMP IP ?
> try this but failed:
> snort.conf
> var SNMP ![192.168.0.1o/32 192.168.8/32]
>
> experimental.conf
> alert udp $SNMP any -> $HOME_NET 161
>
> but... it still detected the alert
>
> i'm using Version 1.8.3 (Build 88)
>
> thanks
>
>
> =====
> file://skopganu
>
> __________________________________________________
> Do You Yahoo!?
> Yahoo! Tax Center - online filing with TurboTax
> http://taxes.yahoo.com/
>
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users