RE: Portscan2 Preprocessor

["Esler, Joel Contractor" <EslerJ () RCERT-S ARMY MIL>]

preprocessor portscan2-ignorehosts: 10.0.0.0/8 192.168.24.0/24  (change the
IP's of course)
 
Enter this line under your portscan2 preprocessor line in your snort.conf
 
 

-----Original Message-----
From: Rodney Green [mailto:rgreen () trayerproducts com] 
Sent: Wednesday, June 18, 2003 11:16 AM
To: 'Snort User Groups'
Subject: [Snort-users] Portscan2 Preprocessor


Is there a way to prevent the portscan2 preprocessor from logging alerts of
certain local machines? I have a few "noisy" machines on the network.
 
Thanks,
Rod