[netsa-tools-discuss] rwidsquery Question on Operation

[Tony Cebzanov]

On 9/24/14, 4:06 PM, Scott Fringer wrote:
> (though I note it doesn't appear that setting EXTERNAL_NET to !$HOME_NET
> is supported either?).

No, it's not -- the variable expansion is very basic, and does not 
handle the Snort IP range grammar.

-- 
Tony Cebzanov * <tonyc at cert.org>
(M) +1 412 265-1240 * (W) +1 412 268-9149
CERT/CC * Engineering * Product Development
Software Engineering Institute * Carnegie Mellon University