[Snort-users] Multiple IP address matching

Kris Kennaway kris at ...484...
Fri Sep 22 03:15:01 EDT 2000


On Fri, 22 Sep 2000, Fyodor wrote:

> ~ :
> ~ :As far as I can tell, snort doesn't have the capability to match on a
> ~ :list of IP addresses, only on a single CIDR block or the negation of
> ~ :that block.
> 
> that's in todo ;-P (been there for a couple of months already, but
> eventually we will get it done, I just got a sort of busy month :))

Thanks for all the responses. Good luck getting the todo list shortened
:-)

Kris

--
In God we Trust -- all others must submit an X.509 certificate.
    -- Charles Forsythe <forsythe at ...485...>




More information about the Snort-users mailing list