RE: Only monitor specified ip's

["Jeff Jennings" <jjennings () zoominternet net>]

How about: 10.0.0.0/31
I'm still a newbie, but I think this will limit you to .0 through .3

Am I correct?

- jeff


-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net] On Behalf Of Glenn E.
Bailey III
Sent: Wednesday, February 13, 2002 3:08 PM
To: Snort-Users
Subject: [Snort-users] Only monitor specified ip's

I have looked through the docs & faq's for a while now and
have come up w/nothing. Basically, I want Snort to ONLY monitor
ip's I specify. Is this easily done without re-writing all the
rules? I though this might work:

var HOME_NET [10.0.0.1,10.0.0.2,10.0.0.3] 

but it doesn't seem to ..

Any suggestions?

. Glenn E. Bailey III
. Network Solutions Developer
. Sprocket Data, Inc.
. 214-343-8300 x 203
. http://www.sprocketdata.com

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users