int13h / squert

A Simple QUEry and Report Tool
http://www.squertproject.org
GNU General Public License v3.0
142 stars 49 forks source link

Feature Request - IP ranges in AUTOCAT #72

Open std0ut opened 9 years ago

std0ut commented 9 years ago

autocat.conf allows src_ip and dest_ip values to be entered in CIDR notation, but this doesn't appear to be the case for the AUTOCAT feature in the Squert gui. It would be helpful to be able to auto-categorize certain events based on IP ranges. It's currently either tedious, or impractical to whitelist a /24, for example.

dm-17 commented 8 years ago

I'm having the same problem, and would appreciate to get a workaround, fix or patch for this. I tried to autocat a x.y.0.0/24 without luck: “ Input error! IP values must be valid IPv4 addresses or “any” “

jo3rg commented 1 year ago

I'd like to bring that topic up again and would also like to add lists as a feature!