Snort mailing list archives

Ignoring IP Pairs


From: "Rich Lichvar" <rlichvar () knowledgeresourcecenter com>
Date: Fri, 22 Aug 2003 13:37:08 -0400

Newbie question: is there a way I can tell Snort to ignore traffic between
two specific IP addresses or from one IP address to a range of IP addresses?
I don't want to filter out all traffic by changing HOME_NET, just traffic
between two internal (10.) IP address pairs that I know are always going to
generate false alerts due to the type of traffic going between the IPs.

Rich Lichvar

Current thread: