[Snort-users] Only monitor specified ip's

Glenn E. Bailey III gbailey at ...4424...
Wed Feb 13 12:22:43 EST 2002


I have looked through the docs & faq's for a while now and
have come up w/nothing. Basically, I want Snort to ONLY monitor
ip's I specify. Is this easily done without re-writing all the
rules? I though this might work:

var HOME_NET [10.0.0.1,10.0.0.2,10.0.0.3] 

but it doesn't seem to ..

Any suggestions?

. Glenn E. Bailey III
. Network Solutions Developer
. Sprocket Data, Inc.
. 214-343-8300 x 203
. http://www.sprocketdata.com




More information about the Snort-users mailing list