Capturing of traffic

NTWIGA MURITHI via Snort-users <[email protected]> Tue, 22 Oct 2024 10:03:17 +0300
Newsgroups gmane.comp.security.ids.snort.general
Message-ID <CA+L=9xFBzV6aHWANtB9kDf5jKiGvfbAYxHo2_rDTNEvrwRTPrw@mail.gmail.com>
--===============5500497546385028559==
Content-Type: multipart/alternative; boundary="000000000000cb020506250b5d88"

--000000000000cb020506250b5d88
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Hello,

I've installed snort version 3.  I've configured only one IP in snort.lua
file. My problem is snort is still capturing traffic from other IPs
(traffic from the entire network). How do I reconfigure to just capture
traffic from only the specified IP address?

--=20

Disclaimer:
 This e-mail and attachments=C2=A0 are confidential and may be=20
privileged and
 protected from discovery or disclosure. If you are not the=20
intended=20
recipient, be aware that any disclosure, copying, dissemination=20
or use=20
of this e-mail or any attachments=C2=A0 is prohibited. If you have=20
received=20
this e-mail in error, please notify the sender immediately and=20
erase all
 copies of the message and its attachments.=C2=A0Any views expressed=20
are=20
those of the individual sender(s) and may not necessarily reflect the=20
views of the Kenyatta University.=20
 <http://www.ku.ac.ke> =20
<https://www.facebook.com/kenyattauni/> =20
<https://plus.google.com/u/0/101726393221697663110> =20
<https://www.linkedin.com/edu/kenyatta-university-14427> =20
<https://www.linkedin.com/edu/kenyatta-university-14427>=20
<https://twitter.com/KenyattaUni>


--000000000000cb020506250b5d88
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Hello,<div><br></div><div>I&#39;ve installed snort version=
 3.=C2=A0 I&#39;ve configured only one IP in snort.lua file. My problem is =
snort is still capturing traffic from other IPs (traffic from the entire ne=
twork). How do=C2=A0I reconfigure to just capture traffic from only the spe=
cified IP address?=C2=A0</div></div>

<br>
<img src=3D"https://i.imgur.com/oS0evoj.jpeg"><br><div><span style=3D"font-=
size:9pt;font-family:&quot;Calisto MT&quot;,serif;color:rgb(191,191,191)">D=
isclaimer:
 This e-mail and attachments=C2=A0 are confidential and may be privileged a=
nd
 protected from discovery or disclosure. If you are not the intended=20
recipient, be aware that any disclosure, copying, dissemination or use=20
of this e-mail or any attachments=C2=A0 is prohibited. If you have received=
=20
this e-mail in error, please notify the sender immediately and erase all
 copies of the message and its attachments.=C2=A0Any views expressed are=20
those of the individual sender(s) and may not necessarily reflect the=20
views of the Kenyatta University. <br><a href=3D"http://www.ku.ac.ke" targe=
t=3D"_blank"><font size=3D"3"><img src=3D"https://i.imgur.com/eGrmJyH.png" =
width=3D"37" height=3D"30"></font></a> <a href=3D"https://www.facebook.com/=
kenyattauni/" target=3D"_blank"><font size=3D"3"><img src=3D"https://i.imgu=
r.com/i4wHe9f.png" width=3D"34" height=3D"34"></font></a> <font size=3D"3">=
<a href=3D"https://plus.google.com/u/0/101726393221697663110" target=3D"_bl=
ank"><img src=3D"https://i.imgur.com/eK3ydeX.png" width=3D"34" height=3D"34=
"></a> <a href=3D"https://www.linkedin.com/edu/kenyatta-university-14427" t=
arget=3D"_blank"><img src=3D"https://i.imgur.com/8hcfPkZ.png" width=3D"34" =
height=3D"34"></a> <a href=3D"https://www.linkedin.com/edu/kenyatta-univers=
ity-14427" target=3D"_blank"></a><a href=3D"https://twitter.com/KenyattaUni=
" target=3D"_blank"><img src=3D"https://i.imgur.com/w300v3T.png" width=3D"3=
4" height=3D"34"></a></font><br></span></div>
--000000000000cb020506250b5d88--

--===============5500497546385028559==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Snort-users mailing list
[email protected]
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

	To unsubscribe, send an email to:
	[email protected]

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette

--===============5500497546385028559==--