[Snort-users] Portscan2 Preprocessor

Esler, Joel Contractor EslerJ at ...8772...
Wed Jun 18 09:17:15 EDT 2003

preprocessor portscan2-ignorehosts:  (change the
IP's of course)
Enter this line under your portscan2 preprocessor line in your snort.conf

-----Original Message-----
From: Rodney Green [mailto:rgreen at ...7484...] 
Sent: Wednesday, June 18, 2003 11:16 AM
To: 'Snort User Groups'
Subject: [Snort-users] Portscan2 Preprocessor

Is there a way to prevent the portscan2 preprocessor from logging alerts of
certain local machines? I have a few "noisy" machines on the network.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20030618/7d04f4f5/attachment.html>

More information about the Snort-users mailing list