[Snort-users] Portscan2 Preprocessor

Esler, Joel Contractor EslerJ at ...8772...
Wed Jun 18 09:17:15 EDT 2003


preprocessor portscan2-ignorehosts: 10.0.0.0/8 192.168.24.0/24  (change the
IP's of course)
 
Enter this line under your portscan2 preprocessor line in your snort.conf
 
 

-----Original Message-----
From: Rodney Green [mailto:rgreen at ...7484...] 
Sent: Wednesday, June 18, 2003 11:16 AM
To: 'Snort User Groups'
Subject: [Snort-users] Portscan2 Preprocessor


Is there a way to prevent the portscan2 preprocessor from logging alerts of
certain local machines? I have a few "noisy" machines on the network.
 
Thanks,
Rod

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20030618/7d04f4f5/attachment.html>


More information about the Snort-users mailing list