[Snort-sigs] Ignoring hosts, modular

Ralph M. Los Ralph at ...50...
Mon Dec 1 11:37:07 EST 2003


Hi,
  Looking for a way, in SNORT 2.x.x of saying "Ignore host A, B, C for rules X, Y, Z".  At very least it should be possible to do a host(many) : rule(singular).  The preferred solution would be modular, in the form of a .rules file, or something similar.
  Can someone offer a quick solution?

Thank you,
  Ralph




More information about the Snort-sigs mailing list