Snort mailing list archives
Ignoring SNMP from specific addresses?
From: Matt Richard <matt.richard () fandm edu>
Date: Mon, 10 Mar 2003 16:20:36 -0500
Hi,I'd like to ignore all SNMP requests from our network management server, which is in a different subnet from my HOME_NET subnet.
Is there an SNMP_SERVERS option, or something like that, that I can add to my snort.conf file? Or would you just suggest adding that server's IP address into my HOME_NET variable? I want to look for other bad stuff that may come from that subnet, but I don't care to know how often that server does a new discovery cycle.
Thanks, Matt -- Matt Richard Access and Security Coordinator Franklin & Marshall College matt.richard () fandm edu ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Deloder worm spyguy (Mar 10)
- Ignoring SNMP from specific addresses? Matt Richard (Mar 10)
- Re: Ignoring SNMP from specific addresses? Erek Adams (Mar 10)
- Re: Ignoring SNMP from specific addresses? Matt Richard (Mar 10)
- Re: Ignoring SNMP from specific addresses? Erek Adams (Mar 10)
- Re: Deloder worm Kevin Pietersma (Mar 11)
- Re: Deloder worm Bill McCarty (Mar 12)
- Ignoring SNMP from specific addresses? Matt Richard (Mar 10)