RE: Specifying Specific Destination IP Addresses

["Mervin Pearce" <mervin () sacs co za>]

Busy with GA at the moment, you log all with SNORT and forward to the
filter for logging.

http://www.bsecure.co.za/prod01.htm

Best Regards
Mervin Pearce (CISA, CISSP)
Chief Executive Officer
Security Audit and Control Solutions
http://www.sacs.co.za
mervin () sacs co za
Tel: +27-11-913-0041
Fax: +27-11-896-1323
Mobile: +27-83-255-5356


-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net] On Behalf Of Kevin
McCarthy
Sent: 17 August 2003 08:53
To: snort-users () lists sourceforge net
Subject: [Snort-users] Specifying Specific Destination IP Addresses


Is it possible for Snort to only listen for traffic destined for
specific IP addresses or a range of IP addresses? And, if so, can they
be group into sets of hosts? I'm having difficulty finding information
on this subject. If anyone can point me in the right direction it would
be  greatly appreciated. I need to seperate based on clients ip ranges,
much like in a web hosting environment. Would I need an instance of
snort for each? All traffic will be monitored through a single
interface. 



-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01
/01
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users





-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users