[netsa-tools-discuss] rwidsquery Question on Operation
tonyc at cert.org
Wed Sep 24 16:12:50 EDT 2014
On 9/24/14, 4:06 PM, Scott Fringer wrote:
> (though I note it doesn't appear that setting EXTERNAL_NET to !$HOME_NET
> is supported either?).
No, it's not -- the variable expansion is very basic, and does not
handle the Snort IP range grammar.
Tony Cebzanov * <tonyc at cert.org>
(M) +1 412 265-1240 * (W) +1 412 268-9149
CERT/CC * Engineering * Product Development
Software Engineering Institute * Carnegie Mellon University
More information about the netsa-tools-discuss