[Snort-sigs] Scanning machine

Erick Mechler emechler at ...1653...
Mon Oct 20 23:26:01 EDT 2003


:: I have a machine with a public ip address that I use to scan my network from
:: the outside. Is there some way that I can exclude alerts from this host, so
:: that I do not clog up my database with false positives? 

Better suited for -users, not -sigs, but here's the link you need anyway:

  http://www.theadamsfamily.net/~erek/snort/ignore.txt

Cheers - Erick




More information about the Snort-sigs mailing list