[Snort-users] $HTTP_SERVERS variable

Brian.Kiefel at ...6795... Brian.Kiefel at ...6795...
Fri May 16 03:47:11 EDT 2003


Hi all,

I would like to set $HTTP_SERVERS to be all(any) except certain ip address.
I am using $HTTP_SERVERS= [!172.x.x.x, !172.x.x.x] (using ! to negate)

this does not seem to work - any body know another way of doing this

thanks

Brian





More information about the Snort-users mailing list