IP Excludes
"Schubert, Aaron" <[email protected]> Tue, 31 Aug 2010 09:09:51 -0500
| Newsgroups | gmane.comp.security.ids.prelude.user |
|---|---|
| Message-ID | <[email protected]> |
Is there a way to exclude an IP address from the Prewikka interface and the correlator? I have a host that is something similar to Big Brother and pings it's sites and hosts for a heartbeat status. Is there a way I can keep that clutter from the web interface/mysql db/correlator? I am not sure if I want to exclude ICMP echo all together by taking care of it in the rules config files. If I did exclude ICMP echoes would I still see event scans and event sweeps. If I do, I would be OK with taking out ICMP echoes from the rules files. _______________________________________________ Prelude-user site list [email protected] http://lists.prelude-technologies.com/mailman/listinfo/prelude-user