[Snort-users] spp_portscan2 questions

Pauling pauling at ...7196...
Fri Oct 18 08:19:04 EDT 2002


Having looked around, I don't see any way for me to tell portscan2 to 
ignore portscans from certain hosts... does anybody know if there is such 
a way, and also if there is a way to specify, "Ignore portscans from 
certain hosts from certain ports" specifially?

Many Thanks

-- 
Frank Barton
Starwolf.biz Systems Administrator





More information about the Snort-users mailing list