Re: Ignore multiple hosts with command line arguments

[Chris Green <cmg () sourcefire com>]

"McKim, Tim" <McKim () nsf org> writes:

> I am using the command line
>
> snort <options> not host x.x.x.x to eliminate alerts from a host. My
> question is:

> Can you use the command line to ignore multiple hosts?

yup

> If yes, what is the syntax?

not \( host 192.168.182.1  or host 192.168.12.12 or net 192.168.1.0/19 \)

-- 
Chris Green <cmg () sourcefire com>
Laugh and the world laughs with you, snore and you sleep alone.

_______________________________________________________________

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users