Re: [$HOME_NET, !192.168.1.222, !192.168.1.223] ? (subnet except specific IPs)

[Matt Kettler <mkettler () evi-inc com>]

Yakov Lerner wrote:
> On 8/7/07, Matt Kettler <mkettler () evi-inc com> wrote:
> > Yakov Lerner wrote:
> > > >
> > >
> > > Is there solution/expression that matches the
> > >          "given subnet except given list of IPs" ?
> > No, other than adding up other subnets to create the equivalent.
>
> Are there IP RANGES, like [IP-IP] or maybe [IP:IP] ?

There's standard CIDR-style subnet masks, but there's no arbitrary-boundary
ranges like that, just like most routing tables.

192.168.1.0/24 would match 192.168.1.0 through 192.168.1.255
192.168.1.0/25 would match 192.168.1.0 through 192.168.1.127

etc.





-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users