RE: Only monitor specified ip's

["Eisenhaur, Gerald" <GEisenhaur () diop com>]

Try:
var HOME_NET [10.0.0.1/32,10.0.0.2/32,10.0.0.3/32] 

-----Original Message-----
From: Glenn E. Bailey III [mailto:gbailey () sprocketdata com]
Sent: Wednesday, February 13, 2002 3:08 PM
To: Snort-Users
Subject: [Snort-users] Only monitor specified ip's


I have looked through the docs & faq's for a while now and
have come up w/nothing. Basically, I want Snort to ONLY monitor
ip's I specify. Is this easily done without re-writing all the
rules? I though this might work:

var HOME_NET [10.0.0.1,10.0.0.2,10.0.0.3] 

but it doesn't seem to ..

Any suggestions?

. Glenn E. Bailey III
. Network Solutions Developer
. Sprocket Data, Inc.
. 214-343-8300 x 203
. http://www.sprocketdata.com

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

#####################################################################################
Note:
This message is for the named person's use only.  It may contain confidential,
proprietary or legally privileged information.  No confidentiality or privilege
is waived or lost by any transmission errors.  If you receive this message in error,
please immediately delete it and all copies of it from your system, destroy any
hard copies of it and notify the sender.  You must not, directly or indirectly,
use, disclose, distribute, print, or copy any part of this message if you are not
the intended recipient. Diversified Optical Products and any of its subsidiaries 
each reserve the right to monitor all e-mail communications through its networks.

Any views expressed in this message are those of the individual sender, except where
the message states otherwise and the sender is authorized to state them to be the
views of any such entity.

Thank You.
#####################################################################################

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users