[Snort-users] one IP

Keming kemweb at ...11142...
Wed Feb 4 04:51:08 EST 2004


Hi,

IŽm trying to monitor only one IP as destination of the subnet but

snort.conf -> var HOME_NET 1.2.3.4/32
and/or
snort.conf -> var HOME_NET 1.2.3.4

seems to obsevere and alert all in this subnet (as destinaton) ?

Thanks
toph







More information about the Snort-users mailing list