Snort mailing list archives
RE: Unable to get Pass rules to ignore some traffic.
From: "McCammon, Keith" <Keith.McCammon () eadvancemed com>
Date: Wed, 17 Jul 2002 17:23:40 -0400
pass udp $BRANCH_NETS any -> x.x.0.2 162 (msg:"SNMP trap udp"; reference:cve,CAN-2002-0012; reference:cve,CAN-2002-0013; sid:1419; rev:2; classtype:attempted-recon;)
You're missing the CIDR designation on the destination address. Should be x.x.0.2/32. ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Unable to get Pass rules to ignore some traffic. David E. Gianndrea (Jul 17)
- <Possible follow-ups>
- RE: Unable to get Pass rules to ignore some traffic. McCammon, Keith (Jul 17)
- Re: Unable to get Pass rules to ignore some traffic. David E. Gianndrea (Jul 17)