Snort mailing list archives
Preprocessor port scan ignore host
From: Joshua Brown <joshua.l.b () gmail com>
Date: Tue, 20 Dec 2005 10:52:14 -0500
Can any one tell me how to ignore a large group of host from being seen as port scanning? This would be mostly to ignore internal servers. ~Joshua -- (I have gmail invites available, if any body wants one.)
Current thread:
- Preprocessor port scan ignore host Joshua Brown (Dec 20)
- Re: Preprocessor port scan ignore host Joel Esler (Dec 20)