Snort mailing list archives

RE: How to configure HOME_NET for less than a Class C


From: "Knight, Ric" <RKnight () TUC ca>
Date: Wed, 6 Nov 2002 09:52:24 -0500

You can use a subnet of a class C which is a /24 network

A specific address would be x.x.x.161/32 

Addresses from 160 to 191 would be x.x.x.160/27 

A class C is 8 /27 networks starting a x.x.x.0/27,  x.x.x.32/27,
x.x.x.64/27, x.x.x.96/27, x.x.x.128/27, x.x.x.160/27, x.x.x.192/27, and
x.x.x.224/27.

Hope this helps. 
=-=-=-=-=-=-=-=-=-=-
Ric Knight
Network Engineer
TransUnion Canada
170 Jackson St. E. 
Hamilton Ontario, L8N 1L4
(905) 525-9013 x6212



-----Original Message-----
From: John Lathem [mailto:jlathem () z-space com]
Sent: November 6, 2002 9:14 AM
To: snort-users () lists sourceforge net
Subject: [Snort-users] How to configure HOME_NET for less than a Class C



How do I configure HOME_NET for less than a full Class C?  I have 32
addresses in the range x.x.x.162 through x.x.x.190 (plus gateway .161).
If I make HOME_NET x.x.x.0/24, Snort will ignore attacks from other
addresses on the Class C but not in my range.  Can HOME_NET be
configured to include only my addresses?

Thanks!

---
John Lathem  <lathem () z-space com>




-------------------------------------------------------
This sf.net email is sponsored by: See the NEW Palm 
Tungsten T handheld. Power & Color in a compact size!
http://ads.sourceforge.net/cgi-bin/redirect.pl?palm0001en
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
This sf.net email is sponsored by: See the NEW Palm 
Tungsten T handheld. Power & Color in a compact size!
http://ads.sourceforge.net/cgi-bin/redirect.pl?palm0001en
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: