OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: DThomazflowserve.com
Date: Tue Jul 02 2002 - 16:03:25 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    My logs are getting home_net users as external_net.
    How do I make a statement on snort.conf that will not apply internal users
    as external.

    Here is my variables:

    var HOME_NET 172.16.0.0/12

    var EXTERNAL_NET any !$HOME_NET

    :^]

    -------------------------------------------------------
    Sponsored by:
    ThinkGeek at http://www.ThinkGeek.com/
    _______________________________________________
    Snort-users mailing list
    Snort-userslists.sourceforge.net
    Go to this URL to change user options or unsubscribe:
    https://lists.sourceforge.net/lists/listinfo/snort-users
    Snort-users list archive:
    http://www.geocrawler.com/redir-sf.php3?list=snort-users