OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Ryan Hill (rhillxypoint.com)
Date: Fri May 03 2002 - 12:09:16 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    I'm no snort expert by any means, but

    var EXTERNAL_NET !$HOME_NET

    (! meaning not equal to) should solve your problems. ;)

    Regards,

    Ryan Hill
    Corporate Information Systems
    TeleCommunication Systems, Inc. (TCS) - http://www.telecomsys.com

    > >However, SNORT seems to IGNORE these networks as my Home
    > Networks and send
    > >alarms for HOME to HOME intrusions.

    _______________________________________________________________

    Have big pipes? SourceForge.net is looking for download mirrors. We supply
    the hardware. You get the recognition. Email Us: bandwidthsourceforge.net
    _______________________________________________
    Snort-users mailing list
    Snort-userslists.sourceforge.net
    Go to this URL to change user options or unsubscribe:
    https://lists.sourceforge.net/lists/listinfo/snort-users
    Snort-users list archive:
    http://www.geocrawler.com/redir-sf.php3?list=snort-users