OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Chris Green (cmgsourcefire.com)
Date: Mon Jun 03 2002 - 13:50:19 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    "McKim, Tim" <McKimnsf.org> writes:

    > I am using the command line
    >
    > snort <options> not host x.x.x.x to eliminate alerts from a host. My
    > question is:

    >
    > Can you use the command line to ignore multiple hosts?

    yup

    >
    > If yes, what is the syntax?
    >

    not \( host 192.168.182.1 or host 192.168.12.12 or net 192.168.1.0/19 \) 

    -- 
Chris Green <cmgsourcefire.com>
Laugh and the world laughs with you, snore and you sleep alone.

    _______________________________________________________________

    Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm

    _______________________________________________
Snort-users mailing list
Snort-userslists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users