03-30-2005 02:40 PM - edited 03-10-2019 01:21 AM
I have a large number of devices that perform the same function in numerous networks. So I keep adding them to a variable that now has a total of 35 IP addresses in the variable. Then I created a filter for IDS Sig 2100 ICMP Network Sweep w/Echo using the $USER-ADDRS3. This all worked for a while but since I have continued to add items to the variable and at some point the filter seems to have stopped working. So I am just wondering if there is a limitation that has been exceeded.
03-31-2005 07:40 AM
I beleive the variables are limited to 1000 characters. If you are getting near that point, I suggest that you split your list into two lists and
add both lists to your filter(s).
03-31-2005 08:45 AM
I tried to use $USER-ADDRS1,$USER-ADDRS2,$USER-ADDRS3 in say the source address but this does not seem to work. I get the Validation Error (Source Address). So I guess I have to create duplicate filters to use each variable.
With this in minde then is there a character limitation also on the Source and Destination address fields in a filter?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide