[Snort-users] help with file bpf and ip 0.0.0.0

hernani coelho hernani_coelho at ...4664...
Mon Jan 18 05:47:05 EST 2016


hello,

i install snort and work but i receive much alerts from ip 0.0.0.0 , i 
put in file BPF this -->

not ( ip host (192.168.1.66 or 0.0.0.0))

for the first ip it work but for ip 0.0.0.0 no work i receive much alerts.

what can i do to ignore alerts from ip 0.0.0.0

can someone help me??

thanks

hernani




More information about the Snort-users mailing list