[Snort-users] portscan target filter ?

Charles Gillet charles at ...8901...
Wed Apr 16 11:13:04 EDT 2003


Hi There,

I would like to filter out a list of port scan target ip's as well as 
source ip's.  I don't see an easy way to do this with either of the two 
portscan preprocessors.  Has anyone come up with a way to do this?  I'm 
running 2.0.0.

thanks for any help,

-charles





More information about the Snort-users mailing list