Re: ignore traffic from specific IP

[Pedro Marinho <pppmarinho () gmail com>]

Thank you very much that is the way. It is because i have a machine here
with nessus.

2010/7/9 JJC <cummingsj () gmail com>

> if you want to ignore it entirely, use a bpf, this can be done in a file or
> at runtime by appending the correct information at the end of the command
> that you use to start snort:
>
> a quick google turned up the following:
>
>
> https://forums.snort.org/forums/snort-advanced/topics/stop-snort-from-interfering-with-all-local-subnet-traffic
>
> On Fri, Jul 9, 2010 at 1:50 PM, Pedro Marinho <pppmarinho () gmail com>wrote:
>
> > Hello gentlemen,
> >
> > How may i do to tell snort to ignore any traffic coming from or going to a
> > specific IP ?
> >
> > the ports i know we can do this
> >
> > config ignore_ports: <list of ports>
> >
> > but i need to ignore a IP that scans the network..
> >
> >
> > ------------------------------------------------------------------------------
> > This SF.net email is sponsored by Sprint
> > What will you do first with EVO, the first 4G phone?
> > Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users () lists sourceforge net
> > Go to this URL to change user options or unsubscribe:
> > https://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
> > http://www.geocrawler.com/redir-sf.php3?list=snort-users
------------------------------------------------------------------------------
This SF.net email is sponsored by Sprint
What will you do first with EVO, the first 4G phone?
Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users