Snort mailing list archives
Ignoring IP Pairs
From: "Rich Lichvar" <rlichvar () knowledgeresourcecenter com>
Date: Fri, 22 Aug 2003 13:37:08 -0400
Newbie question: is there a way I can tell Snort to ignore traffic between two specific IP addresses or from one IP address to a range of IP addresses? I don't want to filter out all traffic by changing HOME_NET, just traffic between two internal (10.) IP address pairs that I know are always going to generate false alerts due to the type of traffic going between the IPs. Rich Lichvar
Current thread:
- Ignoring IP Pairs Rich Lichvar (Aug 22)