actually, with 'preprocessor portscan2-ignorehosts: x.x.x.x' it will
just ignore all portscans from that
specific host. No need to specify a certain port when you want to ignore
them.....

Pauling wrote:

>Having looked around, I don't see any way for me to tell portscan2 to
>ignore portscans from certain hosts... does anybody know if there is such
>a way, and also if there is a way to specify, "Ignore portscans from
>certain hosts from certain ports" specifially?
>
>Many Thanks
>
>
>

-- 
The secret to success is to start from scratch and keep on scratching.
-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-userslists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]