Re: Pass rule not working...

[Erek Adams <erek () snort org>]

On Thu, 23 Jan 2003, Matt Kettler wrote:

> Actually, *does* that work for you Erek?
>
> I seemed to have to use:
> preprocessor portscan2-ignorehosts: $HOME_NET
>
> instead of:
> preprocessor portscan-ignorehosts: $HOME_NET
>
> when using portscan2, and that output looks pretty portscan2-ish to me.

[...snip...]

Thanks for the catch.  I didn't really notice that it was ps2.  I guess I
wasn't coffenated enough.  :)

-----
Erek Adams

   "When things get weird, the weird turn pro."   H.S. Thompson


-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users