Re: exclude ip

["Michael Scheidell" <scheidell () secnap net>]

look at thresholding and/or bpf filters.
 

        -----Original Message-----
        From: snort-users-bounces () lists sourceforge net
[mailto:snort-users-bounces () lists sourceforge net] On Behalf Of fname
lname
        Sent: Wednesday, July 05, 2006 5:09 PM
        To: snort-users () lists sourceforge net
        Subject: [Snort-users] exclude ip
        
        
        If I wanted to exclude an ip from the ids how will i go about
doing that.  Ex is I wanted to exclude 1.2.3.4 from an smtp rule how can
i make that happen?
        

Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users