[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

snort not recognizing dns server correctly

I have the following entry in /etc/snort/snort.conf

var DNS_SERVERS [,,]

The 192... is a local private network and the next 2 addresses
are dns servers.  Snort is constantly logging activity to the 1st
dns server as a portscan, and as I understand it, this config
entry is supposed to eliminate that.  Is this incorrect?


Jeff Coppock		Systems Engineer
Diggin' Debian		Admin and User

To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

Reply to: