Re: [Snort-sigs] snort whitelist

From: <frank(at)betaversion.net>
Date: Thu Mar 25 2004 - 09:44:34 EST

MEGA Hospedagem <snort@megahospedagem.com.br>:

> is it possible to set snort to don't even analyze packets from certain

Yes, you can do this by passing a BPF-Filter on startup.

eg.
$ snort src not 192.168.1.1 and dst not 192.168.1.1

HTH Frank

---

This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click

---

Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs Received on Thu Mar 25 10:53:38 2004