[Snort-users] Pass rule?

Keith W. McCammon mccammon at ...11827...
Wed Jul 14 13:15:16 EDT 2004


See the command reference.  You probably forgot to start Snort with
the -o option.

----- Original Message -----
From: Scott Elgram <selgram at ...10477...>
Date: Wed, 30 Jun 2004 14:18:10 -0700
Subject: [Snort-users] Pass rule?
To: snort-users at lists.sourceforge.net

Hello,

    I am attempting to write a set of rules for my SNORT 2.4 
machine.  I would like to ignore any pings that are generated by my 
computer.  I wrote this simple rule

Pass icmp 192.168.0.31 any -> any any 

but the rule doesn't seem to work.  The pings still show up.  I'm 
I doing something wrong?


-Scott




More information about the Snort-users mailing list