Re: Snort home net and external net question

[waldo kitty <wkitty42 () windstream net>]

On 9/3/2010 14:25, Jason Wallace wrote:
> That error is because the /16 contains the /24 (bigger = more general)

that says that the reason someone else posted it should be capable is why it is 
not capable... seems like some backward logic may be in place with this 
particular need...

> You can do ... [10.1.0.0/16, ![10.1.1.0/24]]
>
> But you can not do ... [10.1.1.0/24,![10.1.0.0/16]]
>
> Also, order does not matter.

that's good to hear...

> pp. 20-21 Snort Manual

which snort manual? specifically, which version? there are many subtle changes 
that may not be apparent between versions... even worse is when VRT doesn't go 
back and correct older documentation :? :(

------------------------------------------------------------------------------
This SF.net Dev2Dev email is sponsored by:

Show off your parallel programming skills.
Enter the Intel(R) Threading Challenge 2010.
http://p.sf.net/sfu/intel-thread-sfd
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users