[Snort-users] Pass rule not working...

Erek Adams erek at ...950...
Fri Jan 24 05:35:08 EST 2003

On Thu, 23 Jan 2003, Matt Kettler wrote:

> Actually, *does* that work for you Erek?
> I seemed to have to use:
> preprocessor portscan2-ignorehosts: $HOME_NET
> instead of:
> preprocessor portscan-ignorehosts: $HOME_NET
> when using portscan2, and that output looks pretty portscan2-ish to me.


Thanks for the catch.  I didn't really notice that it was ps2.  I guess I
wasn't coffenated enough.  :)

Erek Adams

   "When things get weird, the weird turn pro."   H.S. Thompson

More information about the Snort-users mailing list