No, only in red zone!
You can see this at the /etc/snort/snort.conf
var HOME_NET [127.0.0.1/32,192.168.1.0/24] var DNS_SERVERS [192.168.2.254] var EXTERNAL_NET !$HOME_NET
No, only in red zone!
You can see this at the /etc/snort/snort.conf
var HOME_NET [127.0.0.1/32,192.168.1.0/24] var DNS_SERVERS [192.168.2.254] var EXTERNAL_NET !$HOME_NET