Snort mailing list archives

alert a list of ip source addresses


From: "Dominik Schmid" <dominik_schmid () gmx ch>
Date: Mon, 28 Nov 2005 11:32:06 +0100 (MET)

Hello

Is there a preprocessor feature to make alerts for a list (file) of ip
source-addresses?

Can also be a rule but then it is not so flexible because i have to make a
rule for each ip-address...

Dominik

-- 
10 GB Mailbox, 100 FreeSMS/Monat http://www.gmx.net/de/go/topmail
+++ GMX - die erste Adresse für Mail, Message, More +++


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: