[Snort-users] Customizing snort rules

Edin Dizdarevic edin.dizdarevic at ...7509...
Tue Apr 6 02:45:26 EDT 2004


Hi,

I don't _really_ get your problem: Have you properly defined your 
HOME_NET and EXTERNAL_NET?

Could you please specify the rules that trigger?

Regards,
Edin

simonkc at ...11578... schrieb:
> Hi,
> 
> Can anyone point me in the direction of any document explaining how to
> customize snort rules.
> I have a situation wherein the Snort IDS is alerting even for normal SNMP
> requests and traps. How do it disable these alerts for only specific SNMP
> management stations but keep the SNMP rule turned on??
> 
> Thanks and Regards   
> 
> Simon 
> 

-- 
Edin Dizdarevic




More information about the Snort-users mailing list