[Snort-devel] Portscan2 ignore hosts

Ian Macdonald secsnortdev at ...1490...
Wed Sep 18 13:07:03 EDT 2002


Just wanting to check should I be using
preprocessor portscan-ignorehosts: 0.0.0.0
or
preprocessor portscan2-ignorehosts: 0.0.0.0

for ignoring the hosts in portscan2?

There is no mention of portscan2-ignorehosts in the snort.conf, or in the
online documents. So I thought I would double check here.

Thanks





More information about the Snort-devel mailing list