Snort mailing list archives

portscan reported from virtual interfaces


From: Jeffrey Meltzer <meltzer () villageworld com>
Date: Fri, 20 Jul 2001 11:33:41 -0400

Hi,

I'm having a problem where snort is reporting portscans from virtual
interfaces on the box where portscan is running (ie, it's reporting that
le0:1 is scanning le0).

Anybody know how I can tell it to not look for this? It's filling up the
logfiles fairly quickly.

Thanks,

Jeff

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: