[Snort-users] skip ip's

Chris Green cmg at ...1935...
Tue Jul 8 13:19:13 EDT 2003


Bryan Irvine <bryan.irvine at ...9066...> writes:

> Is there a way to get snort to skip over ip's?  I keep tripping the
> porno alerts whenever I view someone elses porno log in acid.  I'd
> like for it to not log my ip.

The easiest way is to do a bpf filter on the snort command line

snort <args> not \( host <ip> and port 80 \)
-- 
Chris Green <cmg at ...1935...>
I've had a perfectly wonderful evening. But this wasn't it.
     -- Groucho Marx




More information about the Snort-users mailing list