[Snort-users] How to exclude alerts from within my home network.

Peter Borner peter at ...3373...
Fri Sep 14 08:29:04 EDT 2001


In my snort.conf file I have set HOME_NET to the IP address and mask of
my internal LAN and then set EXTERNAL_NET to !$HOME_NET

I was hoping this would avoid recording alerts from machines within my
home network. However, I am still seeing numerous alerts from these
machines being recorded in the database. Have I done something wrong?

Thanks,

Peter




More information about the Snort-users mailing list