Snort mailing list archives

Preprocessor port scan ignore host

From: Joshua Brown <joshua.l.b () gmail com>
Date: Tue, 20 Dec 2005 10:52:14 -0500

Can any one tell me how to ignore a large group of host from being seen as
port scanning? This would be mostly to ignore internal servers.

~Joshua


--

(I have gmail invites available, if any body wants one.)

Current thread:

Preprocessor port scan ignore host Joshua Brown (Dec 20)
- Re: Preprocessor port scan ignore host Joel Esler (Dec 20)