[Bro] Proper syntax for ignoring subnet to subnet traffic

Mathew Binkley mathew.binkley at vanderbilt.edu
Thu Mar 11 11:01:36 PST 2010


What is the correct way to tell bro to ignore any traffic between two 
machines?   If I have World, Machine1, and Machine2, then I want to monitor:

     World <-> Machine1
     World <-> Machine2

but not  Machine1 <-> Machine2.  Thanks.


Mat




More information about the Bro mailing list