Snort mailing list archives
RE: How to configure HOME_NET for less than a Class C
From: "Knight, Ric" <RKnight () TUC ca>
Date: Wed, 6 Nov 2002 09:52:24 -0500
You can use a subnet of a class C which is a /24 network A specific address would be x.x.x.161/32 Addresses from 160 to 191 would be x.x.x.160/27 A class C is 8 /27 networks starting a x.x.x.0/27, x.x.x.32/27, x.x.x.64/27, x.x.x.96/27, x.x.x.128/27, x.x.x.160/27, x.x.x.192/27, and x.x.x.224/27. Hope this helps. =-=-=-=-=-=-=-=-=-=- Ric Knight Network Engineer TransUnion Canada 170 Jackson St. E. Hamilton Ontario, L8N 1L4 (905) 525-9013 x6212 -----Original Message----- From: John Lathem [mailto:jlathem () z-space com] Sent: November 6, 2002 9:14 AM To: snort-users () lists sourceforge net Subject: [Snort-users] How to configure HOME_NET for less than a Class C How do I configure HOME_NET for less than a full Class C? I have 32 addresses in the range x.x.x.162 through x.x.x.190 (plus gateway .161). If I make HOME_NET x.x.x.0/24, Snort will ignore attacks from other addresses on the Class C but not in my range. Can HOME_NET be configured to include only my addresses? Thanks! --- John Lathem <lathem () z-space com> ------------------------------------------------------- This sf.net email is sponsored by: See the NEW Palm Tungsten T handheld. Power & Color in a compact size! http://ads.sourceforge.net/cgi-bin/redirect.pl?palm0001en _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users ------------------------------------------------------- This sf.net email is sponsored by: See the NEW Palm Tungsten T handheld. Power & Color in a compact size! http://ads.sourceforge.net/cgi-bin/redirect.pl?palm0001en _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- RE: How to configure HOME_NET for less than a Class C Matt Yackley (Nov 06)
- <Possible follow-ups>
- RE: How to configure HOME_NET for less than a Class C Knight, Ric (Nov 06)