[Snort-users] Only monitor specified ip's

Glenn E. Bailey III gbailey at ...4424...
Wed Feb 13 12:56:48 EST 2002


thnx, that seems to fix things ;-)

-----Original Message-----
From: Gadrow, Jim [mailto:jgadrow at ...3548...]
Sent: Wednesday, February 13, 2002 2:35 PM
To: 'Glenn E. Bailey III'
Subject: RE: [Snort-users] Only monitor specified ip's

change them to,,etc.

You need the netmask.


-----Original Message-----
From: Glenn E. Bailey III [mailto:gbailey at ...4424...]
Sent: Wednesday, February 13, 2002 3:08 PM
To: Snort-Users
Subject: [Snort-users] Only monitor specified ip's

I have looked through the docs & faq's for a while now and
have come up w/nothing. Basically, I want Snort to ONLY monitor
ip's I specify. Is this easily done without re-writing all the
rules? I though this might work:

var HOME_NET [,,] 

but it doesn't seem to ..

Any suggestions?

. Glenn E. Bailey III
. Network Solutions Developer
. Sprocket Data, Inc.
. 214-343-8300 x 203
. http://www.sprocketdata.com

Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:

More information about the Snort-users mailing list