[Snort-users] Ignore ICMP ping

Math roy15 at ...5919...
Fri May 31 05:20:03 EDT 2002


Hello, i just wanna know if there is anyway to block ICMP PING from a 
computer. I find how to ignore some tcp/udp ping by the preprocessor 
command in Snort.conf, but can i just but another line to disable some 
server ICMP PING activity to be put in my alert log?
A little help would be appreciate here if anybody got answer ... I use 
SnortSnarf and i dont wanna see those ping in my stats, so must block in 
snort...

thx math
Comp. Ing. ULaval





More information about the Snort-users mailing list