IP Excludes

"Schubert, Aaron" <[email protected]> Tue, 31 Aug 2010 09:09:51 -0500
Newsgroups gmane.comp.security.ids.prelude.user
Message-ID <[email protected]>
Is there a way to exclude an IP address from the Prewikka interface and
the correlator?  I have a host that is something similar to Big Brother
and pings it's sites and hosts for a heartbeat status.  Is there a way I
can keep that clutter from the web interface/mysql db/correlator?

 

I am not sure if I want to exclude ICMP echo all together by taking care
of it in the rules config files.  If I did exclude ICMP echoes would I
still see event scans and event sweeps.  If I do, I would be OK with
taking out ICMP echoes from the rules files.

 

 

 

 

_______________________________________________
Prelude-user site list
[email protected]
http://lists.prelude-technologies.com/mailman/listinfo/prelude-user