[Snort-users] BPF filters and Demarc

Erek Adams erek at ...950...
Tue Jul 29 04:12:15 EDT 2003


On Mon, 28 Jul 2003, Gary Danko wrote:

[...snip...]

> Here is the contents of my bpf filter:
> [root at ...9745... conf]$ more bpf-filters.conf
> !host 192.168.1.10
> !host 10.2.20.20
> !host 10.2.20.30

Invalid BPF filter.

	'not (host 192.168.1.10 or host 10.2.30.20 or host 10.2.20.30)'

Cheers!

-----
Erek Adams

   "When things get weird, the weird turn pro."   H.S. Thompson




More information about the Snort-users mailing list