[Snort-users] Whitelist IP's?

Jeff Meigs jmeigs at ...16864...
Tue Jul 8 13:49:58 EDT 2014


Hey Everyone,

Trying to whitelist an IP so I don't receive alerts from it. Do I do this in the threshold.conf? If so whats the proper way to write it?
Suppress track_by_src, IP X.X.X.X?

Or is there another spot I do this in?

I'm running snort on Centos, and I do use pulled pork.

Thanks in advance,
-Jeff
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20140708/ee275077/attachment.html>


More information about the Snort-users mailing list