Snort mailing list archives
My Webservers Are Showing Up In My Alerts
From: "Vadim Pushkin" <wiskbroom () hotmail com>
Date: Thu, 13 Jun 2002 19:18:31 +0000
Greetings Fellowes; My snort.conf has the following entries:var HTTP_SERVERS [192.168.11.41/32,192.168.11.42/32,192.168.11.43/32,192.168.11.44/32]
# Above is all on one line var HTTP_SERVERS_PORT 8080 Several of my rules have port 80 replaced with $HTTP_SERVERS_PORT. I am getting ALOT of alerts for these as either source or dest. How can I prevent this? Thank you kindly, -vadim Vadim (Ukranian Stallion) Pushkin _________________________________________________________________ Chat with friends online, try MSN Messenger: http://messenger.msn.com _______________________________________________________________ Don't miss the 2002 Sprint PCS Application Developer's Conference August 25-28 in Las Vegas - http://devcon.sprintpcs.com/adp/index.cfm?source=osdntextlink _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- My Webservers Are Showing Up In My Alerts Vadim Pushkin (Jun 13)
- Re: My Webservers Are Showing Up In My Alerts Matt Kettler (Jun 13)
- <Possible follow-ups>
- Re: My Webservers Are Showing Up In My Alerts Vadim Pushkin (Jun 13)
- Re: My Webservers Are Showing Up In My Alerts matt (Jun 13)
- Re: My Webservers Are Showing Up In My Alerts Vadim Pushkin (Jun 13)
- Re: My Webservers Are Showing Up In My Alerts matt (Jun 13)
- Re: My Webservers Are Showing Up In My Alerts Muhammad Faisal Rauf Danka (Jun 13)
- Re: My Webservers Are Showing Up In My Alerts Vadim Pushkin (Jun 14)
- Re: My Webservers Are Showing Up In My Alerts Vadim Pushkin (Jun 14)