[Snort-devel] portscan2-ignorehosts

Ian Macdonald secsnortdev at ...1490...
Wed Oct 2 14:37:01 EDT 2002


Had a little bit of time to play with the ignore hosts for portscan2. It
seems that it only ignores portscans if the source ip matches. With the
original portscan I am sure it ignores if there is a match on either the
source or the destination IP. Is this working as designed or a bug?

Ian





More information about the Snort-devel mailing list