Snort rules

From: cc_photo@mtnguy.com
Date: 12/12/01 

From: cc_photo@mtnguy.com
Date: Wed, 12 Dec 2001 19:11:26 GMT

Some of my snort rules are giving me false positives on certain web
sites. I created a new rule I called "skip.rule" that skips the
address I'm not concerned about. In this rule I have several addresses
that are very close in range.

Example:
x.x.1.1
x.x.1.2
x.x.1.3
etc.

Is there a way to combine these lines to tell snort to skip addresses
x.x.1.1 through x.x.1.3 in 1 line instead of having 3 individual lines
of code?

Chuck

Quantcast