Capturing of traffic
NTWIGA MURITHI via Snort-users <[email protected]> Tue, 22 Oct 2024 10:03:17 +0300
| Newsgroups | gmane.comp.security.ids.snort.general |
|---|---|
| Message-ID | <CA+L=9xFBzV6aHWANtB9kDf5jKiGvfbAYxHo2_rDTNEvrwRTPrw@mail.gmail.com> |
--===============5500497546385028559== Content-Type: multipart/alternative; boundary="000000000000cb020506250b5d88" --000000000000cb020506250b5d88 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hello, I've installed snort version 3. I've configured only one IP in snort.lua file. My problem is snort is still capturing traffic from other IPs (traffic from the entire network). How do I reconfigure to just capture traffic from only the specified IP address? --=20 Disclaimer: This e-mail and attachments=C2=A0 are confidential and may be=20 privileged and protected from discovery or disclosure. If you are not the=20 intended=20 recipient, be aware that any disclosure, copying, dissemination=20 or use=20 of this e-mail or any attachments=C2=A0 is prohibited. If you have=20 received=20 this e-mail in error, please notify the sender immediately and=20 erase all copies of the message and its attachments.=C2=A0Any views expressed=20 are=20 those of the individual sender(s) and may not necessarily reflect the=20 views of the Kenyatta University.=20 <http://www.ku.ac.ke> =20 <https://www.facebook.com/kenyattauni/> =20 <https://plus.google.com/u/0/101726393221697663110> =20 <https://www.linkedin.com/edu/kenyatta-university-14427> =20 <https://www.linkedin.com/edu/kenyatta-university-14427>=20 <https://twitter.com/KenyattaUni> --000000000000cb020506250b5d88 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr">Hello,<div><br></div><div>I've installed snort version= 3.=C2=A0 I've configured only one IP in snort.lua file. My problem is = snort is still capturing traffic from other IPs (traffic from the entire ne= twork). How do=C2=A0I reconfigure to just capture traffic from only the spe= cified IP address?=C2=A0</div></div> <br> <img src=3D"https://i.imgur.com/oS0evoj.jpeg"><br><div><span style=3D"font-= size:9pt;font-family:"Calisto MT",serif;color:rgb(191,191,191)">D= isclaimer: This e-mail and attachments=C2=A0 are confidential and may be privileged a= nd protected from discovery or disclosure. If you are not the intended=20 recipient, be aware that any disclosure, copying, dissemination or use=20 of this e-mail or any attachments=C2=A0 is prohibited. If you have received= =20 this e-mail in error, please notify the sender immediately and erase all copies of the message and its attachments.=C2=A0Any views expressed are=20 those of the individual sender(s) and may not necessarily reflect the=20 views of the Kenyatta University. <br><a href=3D"http://www.ku.ac.ke" targe= t=3D"_blank"><font size=3D"3"><img src=3D"https://i.imgur.com/eGrmJyH.png" = width=3D"37" height=3D"30"></font></a> <a href=3D"https://www.facebook.com/= kenyattauni/" target=3D"_blank"><font size=3D"3"><img src=3D"https://i.imgu= r.com/i4wHe9f.png" width=3D"34" height=3D"34"></font></a> <font size=3D"3">= <a href=3D"https://plus.google.com/u/0/101726393221697663110" target=3D"_bl= ank"><img src=3D"https://i.imgur.com/eK3ydeX.png" width=3D"34" height=3D"34= "></a> <a href=3D"https://www.linkedin.com/edu/kenyatta-university-14427" t= arget=3D"_blank"><img src=3D"https://i.imgur.com/8hcfPkZ.png" width=3D"34" = height=3D"34"></a> <a href=3D"https://www.linkedin.com/edu/kenyatta-univers= ity-14427" target=3D"_blank"></a><a href=3D"https://twitter.com/KenyattaUni= " target=3D"_blank"><img src=3D"https://i.imgur.com/w300v3T.png" width=3D"3= 4" height=3D"34"></a></font><br></span></div> --000000000000cb020506250b5d88-- --===============5500497546385028559== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Snort-users mailing list [email protected] Go to this URL to change user options or unsubscribe: https://lists.snort.org/mailman/listinfo/snort-users To unsubscribe, send an email to: [email protected] Please visit http://blog.snort.org to stay current on all the latest Snort news! Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette --===============5500497546385028559==--