Re: Will Snort understand something like this?

[Joel Esler <joel.esler () sourcefire com>]

Why wouldn't you just do a var EXTERNAL_NET $DMZ_NET


??

Joel


On Sep 28, 2005, at 9:53 AM, Hin wrote:

> Hi Snorters,
>
> I set the following in my snort.conf
>
> var HOME_NET 192.168.0.0/16
> var DMZ_NET [192.168.5.0/24,192.168.10.0/24,192.168.15.0/24]
> var EXTERNAL_NET [!$HOME_NET,$DMZ_NET]
>
> Snort starts properly, but I don't know if Snort interprets  
> EXTERNAL_NET correctly. Is there a way that I can find this  
> information out?
>
> ps. Let's not try to understand how I get into this situation.
>
> Cheers,
>
> Hin
>
>
> __________________________________________________________________
> Switch to Netscape Internet Service.
> As low as $9.95 a month -- Sign up today at http://isp.netscape.com/ 
> register
>
> Netscape. Just the Net You Need.
>
> New! Netscape Toolbar for Internet Explorer
> Search from anywhere on the Web and block those annoying pop-ups.
> Download now at http://channels.netscape.com/ns/search/install.jsp
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by:
> Power Architecture Resource Center: Free content, downloads,  
> discussions,
> and more. http://solutions.newsforge.com/ibmarch.tmpl
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users



-------------------------------------------------------
This SF.Net email is sponsored by:
Power Architecture Resource Center: Free content, downloads, discussions,
and more. http://solutions.newsforge.com/ibmarch.tmpl
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users