[Snort-users] using full ip address

Robert E. Leever bel1 at ...358...
Wed Oct 11 20:49:26 EDT 2000


Nope, you didn't misunderstand me, altho I could've
been a bit clearer.  

I was asking if having xx.xx.xx.54/24
would see the whole subnet or just .54, and I think
you answered my question.

going back to the thread where the script was pulling
the ip address out of and ifconfig we were
just hanging a /24 on the whole ip addresses instead
of makeing the .54 part a .0/24 ....

so the script with the awk command won't work unless
you just intend to monitor that single ip address.

Unless I've misunderstood your answer.  (c:

thanks


b;)



More information about the Snort-users mailing list