Snort mailing list archives

Re: Snort 1.8.7b6 not listen to BPF filters


From: "Michael Scheidell" <scheidell () secnap net>
Date: Fri, 19 Jul 2002 14:24:04 -0400


----- Original Message -----
From: "Michael Boman" <michael.boman () securecirt com>
Newsgroups: local.snort.users
Sent: Thursday, July 18, 2002 9:50 AM
Subject: [Snort-users] Snort 1.8.7b6 not listen to BPF filters

and

usr/bin/snort -D -U -o -i eth1 -c /etc/snort_eth1/snort.conf -F
/etc/snort_eth1/ignore.bpf -z

where content of 'ignore.bpf' is:
not host x.x.x.x


I have had the same problem since 1.8.6.x
Sent in several requests for guidance, none of them have been very helpful
so far.
--
Michael Scheidell
SECNAP Network Security, LLC
Sales: 866-SECNAPNET / (1-866-732-6276)
Main: 561-368-9561 / www.secnap.net

- --
Michael Boman
Security Architect, SecureCiRT (A SBU of Z-Vance Pte Ltd)
http://www.securecirt.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE9NsbNds5fQJiraJwRAus+AJ9CLkzaL1XNGDvq0dwlROJs21v91wCgmvPB
UvGPZFhAkRbNhOULE3Q4zk4=
=bAe1
-----END PGP SIGNATURE-----



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

---



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: