RE: Snort IGNORES var HOME_NET

[Ryan Hill <rhill () xypoint com>]

I'm no snort expert by any means, but

var EXTERNAL_NET !$HOME_NET

(! meaning not equal to) should solve your problems. ;)

Regards,

Ryan Hill
Corporate Information Systems
TeleCommunication Systems, Inc. (TCS) - http://www.telecomsys.com


> > However, SNORT seems to IGNORE these networks as my Home 
> Networks and send
> > alarms for HOME to HOME intrusions.

_______________________________________________________________

Have big pipes? SourceForge.net is looking for download mirrors. We supply
the hardware. You get the recognition. Email Us: bandwidth () sourceforge net
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users