[Snort-users] reputation preprocessor and IDS

waldo kitty wkitty42 at ...14940...
Tue Jun 4 15:27:46 EDT 2013


does the reputation preprocessor work in IDS (non-inline) mode?

eg: if one places an IP in the whitelist, that IP still generates alerts. it 
should not, should it? shouldn't it just pass right on thru all processing?

-- 
NOTE: No off-list assistance is given without prior approval.
       Please keep mailing list traffic on the list unless
       private contact is specifically requested and granted.




More information about the Snort-users mailing list