Snort mailing list archives

Re: ignore hosts


From: Erek Adams <erek () theadamsfamily net>
Date: Wed, 6 Nov 2002 14:54:04 -0800 (PST)

On Wed, 6 Nov 2002, aaz wrote:

Brand new to snort.

Good!  Welcome to our madness!  ;-)

We want to ignore certain IPs from showing up as alerts regardless of
if they are the source or destination. I see the portscan ignore hosts,
however is there some other general place to specify this that will
apply for all the rules before being logged?

http://www.theadamsfamily.net/~erek/snort/ignore.txt

Cheers!

-----
Erek Adams
Nifty-Type-Guy
TheAdamsFamily.Net



-------------------------------------------------------
This sf.net email is sponsored by: See the NEW Palm 
Tungsten T handheld. Power & Color in a compact size!
http://ads.sourceforge.net/cgi-bin/redirect.pl?palm0001en
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: