[Snort-users] help with file bpf and ip 0.0.0.0

hernani coelho hernani_coelho at ...4664...
Wed Jan 20 04:44:20 EST 2016


nobody can help me??

On 18-01-2016 10:47, hernani coelho wrote:
> hello,
>
> i install snort and work but i receive much alerts from ip 0.0.0.0 , i 
> put in file BPF this -->
>
> not ( ip host (192.168.1.66 or 0.0.0.0))
>
> for the first ip it work but for ip 0.0.0.0 no work i receive much 
> alerts.
>
> what can i do to ignore alerts from ip 0.0.0.0
>
> can someone help me??
>
> thanks
>
> hernani





More information about the Snort-users mailing list