OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Joseph Inserra (JInserraIndeliq.com)
Date: Mon Jun 03 2002 - 11:28:34 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    I've been trying to ignore portscans from two servers......My problem is that I can ignore only one of the two servers. In the snort.conf file there is a portscan-ignorehosts section in the preprocessors. My question is if you would like to ignore two hosts is there a delimiter character that I'm missing? Or is there a better method to accomplish my objective.

    Thanks in advance,
    Joseph

    _______________________________________________________________

    Don't miss the 2002 Sprint PCS Application Developer's Conference
    August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm

    _______________________________________________
    Snort-users mailing list
    Snort-userslists.sourceforge.net
    Go to this URL to change user options or unsubscribe:
    https://lists.sourceforge.net/lists/listinfo/snort-users
    Snort-users list archive:
    http://www.geocrawler.com/redir-sf.php3?list=snort-users