Snort mailing list archives
Only monitor specified ip's
From: "Glenn E. Bailey III" <gbailey () sprocketdata com>
Date: Wed, 13 Feb 2002 14:08:07 -0600
I have looked through the docs & faq's for a while now and have come up w/nothing. Basically, I want Snort to ONLY monitor ip's I specify. Is this easily done without re-writing all the rules? I though this might work: var HOME_NET [10.0.0.1,10.0.0.2,10.0.0.3] but it doesn't seem to .. Any suggestions? . Glenn E. Bailey III . Network Solutions Developer . Sprocket Data, Inc. . 214-343-8300 x 203 . http://www.sprocketdata.com _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Only monitor specified ip's Glenn E. Bailey III (Feb 13)
- Re: Only monitor specified ip's Erek Adams (Feb 13)
- RE: Only monitor specified ip's Jeff Jennings (Feb 13)
- <Possible follow-ups>
- RE: Only monitor specified ip's Eisenhaur, Gerald (Feb 13)
- RE: Only monitor specified ip's Glenn E. Bailey III (Feb 13)