Re: Portscan2 & Portscan Ignorehosts

[James Hoagland <hoagland () SiliconDefense com>]

At 2:34 PM +0200 10/18/02, Sean Wheeler wrote:
> Hi,
>
> I understand that portscan ignorehosts operates with portscan.
>
> In the snort 1.9.0beta documentation is does not mention whether this
> preproc is also used by portscan2.
>
> Could someone confirm whether the preproc portscan ignorehosts applies to
> portscan2 preproc aswell ?

spp_portscan2 uses 'preprocessor portscan2-ignorehosts:' as the start 
of its "ignore hosts" configuration.

-- Jim

--
|*      Jim Hoagland, Associate Researcher, Silicon Defense      *|
|*            --- Silicon Defense: IDS Solutions ---             *|
|*  hoagland () SiliconDefense com, http://www.silicondefense.com/  *|
|*   Voice: (530) 756-7317                 Fax: (530) 756-7297   *|


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users