[Snort-users] Whitelist IP's?
jmeigs at ...16864...
Tue Jul 8 13:49:58 EDT 2014
Trying to whitelist an IP so I don't receive alerts from it. Do I do this in the threshold.conf? If so whats the proper way to write it?
Suppress track_by_src, IP X.X.X.X?
Or is there another spot I do this in?
I'm running snort on Centos, and I do use pulled pork.
Thanks in advance,
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Snort-users