[Snort-users] one ip want to snmp access

Knight, Ric RKnight at ...7145...
Tue Nov 19 07:17:07 EST 2002


The default SNMP rules check for traffic from the External net to the Home
Net. Make the one IP part of the Home Net and alerts will go away.. 

-Ric 

-----Original Message-----
From: Alireza Naderi [mailto:alireza at ...7551...]
Sent: November 19, 2002 7:54 AM
To: snort-users at lists.sourceforge.net
Subject: [Snort-users] one ip want to snmp access



Hi All

One of our friend monitoring his server from outside (snmp)and
with specific IP adress so snort detect it and make a alart.
How can i remove this ip address from my logs it means i
want to make alert for all IP address that attempt to snmp access
except this specific IP address.

Thanx
Alireza







-------------------------------------------------------
This sf.net email is sponsored by: To learn the basics of securing 
your web site with SSL, click here to get a FREE TRIAL of a Thawte 
Server Certificate: http://www.gothawte.com/rd524.html
_______________________________________________
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users




More information about the Snort-users mailing list