Snort mailing list archives
RE: portscan2 ignore destination
From: "Lund, Carl Fredrik" <Carl-Fredrik.Lund () teleservice telenor com>
Date: Tue, 18 Mar 2003 13:48:13 +0100
I use portscan2-ignorehosts, but that does just ignore the source addresses. Any other suggestions? -----Original Message----- From: Erek Adams [mailto:erek () snort org] Sent: 18. mars 2003 13:34 To: Lund, Carl Fredrik Cc: snort-users () lists sourceforge net Subject: Re: [Snort-users] portscan2 ignore destination On Tue, 18 Mar 2003, Lund, Carl Fredrik wrote:
Does anybody know if it is possible to ignore destination hosts with portscan2. I have seen the question on the list before, but I couldn't find the answer.
preprocessor portscan2-ignorehosts: <foo> Put that right above the preprocessor line for ps2, and all should be good. Cheers! ----- Erek Adams "When things get weird, the weird turn pro." H.S. Thompson ------------------------------------------------------- This SF.net email is sponsored by: Does your code think in ink? You could win a Tablet PC. Get a free Tablet PC hat just for playing. What are you waiting for? http://ads.sourceforge.net/cgi-bin/redirect.pl?micr5043en _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- portscan2 ignore destination Lund, Carl Fredrik (Mar 18)
- Re: portscan2 ignore destination Erek Adams (Mar 18)
- <Possible follow-ups>
- RE: portscan2 ignore destination Lund, Carl Fredrik (Mar 18)
- RE: portscan2 ignore destination Erek Adams (Mar 18)