Snort mailing list archives
Re: Antwort: IP Range Problems
From: Erek Adams <erek () snort org>
Date: Wed, 6 Aug 2003 11:33:26 -0400 (EDT)
On Wed, 6 Aug 2003 m.stiefenhofer () ecofis de wrote:
i want snort to look at the ip range of 10.5.0.1 - 10.5.4.254 but i cant figure out how to input this into the ip list. how do i put that into the var HOME_NET list? thanks for any helpvar HOME_NET 10.5.0.0/22
Sorry, that's not going to work. Ipcalc is your friend! [erek@fred]~>ipcalc 10.5.0.0/22 Address: 10.5.0.0 00001010.00000101.000000 00.00000000 Netmask: 255.255.252.0 = 22 11111111.11111111.111111 00.00000000 Wildcard: 0.0.3.255 00000000.00000000.000000 11.11111111 => Network: 10.5.0.0/22 00001010.00000101.000000 00.00000000 (Class A) Broadcast: 10.5.3.255 00001010.00000101.000000 11.11111111 HostMin: 10.5.0.1 00001010.00000101.000000 00.00000001 HostMax: 10.5.3.254 00001010.00000101.000000 11.11111110 Hosts/Net: 1022 (Private Internet RFC 1918) It won't catch the 10.5.4.x net. You'll need to use something else. Since the more subnets you throw at HOME_NET the more Snort has to work, you'll come out with: var HOME_NET [10.5.0.0/22,10.5.4.0/24] Cheers! ----- Erek Adams "When things get weird, the weird turn pro." H.S. Thompson ------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- RE: IP Range Problems, (continued)
- RE: IP Range Problems Esler, Joel Contractor (Jul 08)
- Re: IP Range Problems James Nonya (Jul 08)
- RE: IP Range Problems Nelson, Ben (Jul 08)
- Re: IP Range Problems Brian (Jul 08)
- Re: IP Range Problems Bryan Irvine (Jul 08)
- Re: IP Range Problems Brian (Jul 08)
- RE: IP Range Problems Hutchinson, Andrew (Jul 09)
- Re: IP Range Problems Marc Quibell (Jul 09)
- Re: IP Range Problems Rich Adamson (Jul 09)
- IP Range Problems Ryan Vennell (Aug 06)
- Antwort: IP Range Problems m . stiefenhofer (Aug 06)
- Re: Antwort: IP Range Problems Erek Adams (Aug 06)
- Re: IP Range Problems lists (Aug 06)
- Antwort: IP Range Problems m . stiefenhofer (Aug 06)