[Snort-users] Portscan2 & Portscan Ignorehosts

James Hoagland hoagland at ...47...
Fri Oct 18 08:30:02 EDT 2002


At 2:34 PM +0200 10/18/02, Sean Wheeler wrote:
>Hi,
>
>I understand that portscan ignorehosts operates with portscan.
>
>In the snort 1.9.0beta documentation is does not mention whether this
>preproc is also used by portscan2.
>
>Could someone confirm whether the preproc portscan ignorehosts applies to
>portscan2 preproc aswell ?
>

spp_portscan2 uses 'preprocessor portscan2-ignorehosts:' as the start 
of its "ignore hosts" configuration.

-- Jim

-- 
|*      Jim Hoagland, Associate Researcher, Silicon Defense      *|
|*            --- Silicon Defense: IDS Solutions ---             *|
|*  hoagland at ...47..., http://www.silicondefense.com/  *|
|*   Voice: (530) 756-7317                 Fax: (530) 756-7297   *|




More information about the Snort-users mailing list