[Snort-sigs] Not sure on the best way to do this

Ian Macdonald secsnortsigs at ...644...
Wed Jun 26 14:36:03 EDT 2002


I have a network segment that I am monitoring. This slightly different
from most for the segments I monitor. here I know exaclty what is allowed
by IP address and port and I would like to report any exceptions to the these
allowed ip/port combinations.

Any thoughts on the best way to do this in snort?


Thanks





More information about the Snort-sigs mailing list