Snort mailing list archives
Re: portscan preprocessor and external net
From: marco turr <marco_syslnx () yahoo it>
Date: Tue, 29 Nov 2005 16:37:37 +0100 (CET)
Jason Brvenik <jasonb () sourcefire com> ha scritto: Variables are not supported for preprocessors. You need to use the actual definitions of the networks and not the variable itself. So, you say that I must write in ingore-scanners or src-ignore-net ALL ip address of internet execpt my subnet? it's crazy :) --------------------------------- Yahoo! Mail: gratis 1GB per i messaggi, antispam, antivirus, POP3
Current thread:
- portscan preprocessor and external net marco turr (Nov 29)
- Re: portscan preprocessor and external net Jason Brvenik (Nov 29)
- Re: portscan preprocessor and external net marco turr (Nov 29)
- Re: portscan preprocessor and external net Matt Kettler (Nov 29)
- Re: portscan preprocessor and external net marco turr (Nov 29)
- Re: portscan preprocessor and external net marco turr (Nov 29)
- Re: portscan preprocessor and external net Jason Brvenik (Nov 29)