Snort mailing list archives

Ignoring SNMP from specific addresses?


From: Matt Richard <matt.richard () fandm edu>
Date: Mon, 10 Mar 2003 16:20:36 -0500

Hi,

I'd like to ignore all SNMP requests from our network management server, which is in a different subnet from my HOME_NET subnet.

Is there an SNMP_SERVERS option, or something like that, that I can add to my snort.conf file? Or would you just suggest adding that server's IP address into my HOME_NET variable? I want to look for other bad stuff that may come from that subnet, but I don't care to know how often that server does a new discovery cycle.

Thanks,

Matt
--
Matt Richard
Access and Security Coordinator
Franklin & Marshall College
matt.richard () fandm edu


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: