[Snort-users] Multiple triggers on portscan plugin

Fyodor fygrave at ...121...
Tue Nov 7 03:48:18 EST 2000


> preprocessor portscan: $HOME_NET 10 1  /opt/snort/logs/ps.log
> preprocessor portscan: $HOME_NET 25 10 /opt/snort/logs/ps.log
> preprocessor portscan: $HOME_NET 120 120 /opt/snort/logs/ps.log
> preprocessor portscan-ignorehosts: $IGNORE_HOSTS
> 

If you can wait with this until we finish dynamically loadable modules 
implementation, multiple initialisation of preprocessors/plugins should be
possible there.



More information about the Snort-users mailing list