Snort mailing list archives
RE: Multiple Subnets in sr net
From: Frank Knobbe <frank () knobbe us>
Date: Fri, 25 Jun 2004 18:27:44 -0500
On Fri, 2004-06-25 at 17:02, Jeff Dell wrote:
$SNORT_PATH/snort -c $CONFIG -i $IFACE -g $SNORT_GID $OPTIONS src net 10.1.1.0/24 or src net 10.2.1.0/24
That will limit it only to packets coming from that network. You probably also want: net 10.1.1.0/24 or net 10.2.1.0/24 (without the src) Regards, Frank ------------------------------------------------------- This SF.Net email sponsored by Black Hat Briefings & Training. Attend Black Hat Briefings & Training, Las Vegas July 24-29 - digital self defense, top technical experts, no vendor pitches, unmatched networking opportunities. Visit www.blackhat.com _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Multiple Subnets in sr net Devanathan, Balaji (Corporate, consultant) (Jun 25)
- RE: Multiple Subnets in sr net Jeff Dell (Jun 25)
- Re: Multiple Subnets in sr net Frank Knobbe (Jun 25)
- <Possible follow-ups>
- RE: Multiple Subnets in sr net Murray, Todd (Jun 25)
- RE: Multiple Subnets in sr net Devanathan, Balaji (Corporate, consultant) (Jun 25)
- RE: Multiple Subnets in sr net Jeff Dell (Jun 25)
- RE: Multiple Subnets in sr net Frank Knobbe (Jun 25)
- RE: Multiple Subnets in sr net Jeff Dell (Jun 25)