[Snort-users] How to exclude alerts from within my home network.

Peter Borner peter at ...3373...
Fri Sep 14 08:29:04 EDT 2001

In my snort.conf file I have set HOME_NET to the IP address and mask of
my internal LAN and then set EXTERNAL_NET to !$HOME_NET

I was hoping this would avoid recording alerts from machines within my
home network. However, I am still seeing numerous alerts from these
machines being recorded in the database. Have I done something wrong?



More information about the Snort-users mailing list