[Snort-users] $HOME_NET Settings

James Lay jlay at ...13475...
Thu Jun 21 07:04:55 EDT 2012


On Jun 21, 2012, at 2:34 AM, yew chuan Ong wrote:
> Hi,
> 
> I am planning to have a HOME NET settings as follow:
> HOME_NET set to 192.168.12.0/24 and  192.168.13.0/24 BUT exclude  192.168.12.11
> 
> I have tried this: $HOME_NET  192.168.12.0/24 , !192.168.12.11, 192.168.13.0/24
> But, it cant work.
> 
> *I need to exclude 192.168.12.11 as all external traffic will pass through 192.168.12.11 (Load Balancer) before it reach my web servers.
> 
> Any ideas? =) Thanks!
> 
> Regards
> YC
> 
> ------------------------------------------------------------------------------


Start snort with a bpf:

snort -c yoursnortconf -i yourinterface ip and not host 192.168.12.11

James
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20120621/60525c25/attachment.html>


More information about the Snort-users mailing list