[Snort-sigs] Scanning machine

Chris Reining creining at ...1973...
Mon Oct 20 19:08:09 EDT 2003

The easiest way to do that would be a bpf filter either defined directly
on the command line or with -F <bpf file>, such as "not host x.x.x.x"


On Mon, Oct 20, 2003 at 08:57:23AM -0500, d'Ambly, Jeff wrote:
> I have a machine with a public ip address that I use to scan my network from
> the outside. Is there some way that I can exclude alerts from this host, so
> that I do not clog up my database with false positives? 

More information about the Snort-sigs mailing list