[Snort-users] how to log *only* $HOME_NET

Erek Adams erek at ...950...
Sat Jun 21 05:45:02 EDT 2003


On Fri, 20 Jun 2003, Jon Baer wrote:

> is there a way to only log your outgoing connections (vs. foreign host IPs
> showing up in logs) ...

Sure.  But if that's what you want, use tcpdump instead.

	snort -b -l <log_dir> 'src net <HOME_NET>'

Cheers!

-----
Erek Adams

   "When things get weird, the weird turn pro."   H.S. Thompson




More information about the Snort-users mailing list