[Snort-users] Snort.conf Syntax Question

Mark Nipper nipsy at ...5072...
Wed Nov 19 14:17:13 EST 2003


On 19 Nov 2003, Kaplan, Andrew H. wrote:
> If I want to monitor only two specific servers on a subnet would the
> following line work in the snort.conf file:
> 
> var HOME_NET [166.52.14.12/24,166.52.14.145/24]

	Should be /32 for a specific host.  Otherwise, it looks
fine.

-- 
Mark Nipper                                                e-contacts:
Computing and Information Services                      nipsy at ...5072...
Texas A&M University                        http://ops.tamu.edu/nipsy/
College Station, TX 77843-3142     AIM/Yahoo: texasnipsy ICQ: 66971617
(979)575-3193                                      MSN: nipsy at ...5072...

-----BEGIN GEEK CODE BLOCK-----
GG/IT d- s++:+ a- C++$ UBL+++$ P--->+++ L+++$ E---
W++ N+ o K++ w(---) O++ M V(--) PS+++(+) PE(--) Y+
PGP++(+) t 5 X R tv b+++ DI+(++) D+ G e h r++ y+(**)
------END GEEK CODE BLOCK------

---begin random quote of the moment---
"I love that you get cold when it's 71 degrees out.  I love
that it takes you an hour and a half to order a sandwich.  I
love that you get a little crinkle above your nose when
you're looking at me like I'm nuts.  I love that after I
spend a day with you, I can still smell your perfume on my
clothes.  And I love that you are the last person I want to
talk to before I go to sleep at night.  And it's not because
I'm lonely, and it's not because it's New Year's Eve.  I
came here tonight because when you realize you want to spend
the rest of your life with somebody, you want the rest of
your life to start as soon as possible.

 -- Harry Burns from "When Harry Met Sally", 1989
----end random quote of the moment----




More information about the Snort-users mailing list