Snort mailing list archives
Re: bpf filter
From: Matt Kettler <mkettler () evi-inc com>
Date: Thu, 12 May 2005 14:22:10 -0400
Dominic wrote:
Hi all, Can anyone point me in the right direction or give me a link to a howto on creating bpf filters to exclude certain ip's and rules etc.
They're the same bpf filters used by tcpdump, so you can always check the tcpdump manpage. Or look at one online: http://www.ethereal.com/docs/man-pages/tcpdump.8.html ------------------------------------------------------- This SF.Net email is sponsored by Oracle Space Sweepstakes Want to be the first software developer in space? Enter now for the Oracle Space Sweepstakes! http://ads.osdn.com/?ad_id=7393&alloc_id=16281&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- bpf filter Dominic (May 12)
- Re: bpf filter Matt Kettler (May 12)
- <Possible follow-ups>
- RE: bpf filter Briggs, Bruce (May 12)