SNMP EXCLUDE

[Ganu Skop <skopganu () yahoo com>]

hi there,
my isp is running mrtg therefore there's always SNMP
request udp alert.
therefore is there anyway that i wanna exclude known
SNMP IP ?
try this but failed:
snort.conf
var SNMP ![192.168.0.1o/32 192.168.8/32]

experimental.conf
alert udp $SNMP any -> $HOME_NET 161

but... it still detected the alert

i'm using Version 1.8.3 (Build 88)

thanks


=====
//skopganu

__________________________________________________
Do You Yahoo!?
Yahoo! Tax Center - online filing with TurboTax
http://taxes.yahoo.com/

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users