[Oisf-users] Large BPF causes suricata to crash

Mon Jun 20 19:06:55 UTC 2016

With a sufficiently long BPF, Suricata (both 3.0.1 RELEASE and 3.1RC1
RELEASE) fail to start with the following error:

<Error> - [ERRCODE: SC_ERR_AFP_CREATE(190)] - Failed to attach filter:
> Invalid argument
> <Error> - [ERRCODE: SC_ERR_AFP_CREATE(190)] - Set AF_PACKET bpf filter
> "not (net 1.2.3.4 or net 1.2.3.5 or

>From what I can tell, it doesn't matter if it's passed via command line,
file, or bpf-filter. Is this a suricata-bug? A limitation of BPF?

My command is:

/usr/local/bin/suricata -c /usr/local/etc/suricata/suricata.yaml
> --af-packet -F /usr/local/etc/suricata/packet.filter

** Please Note **
The IP's that i want to avoid inspecting are not listed, and i'm aware that
the problem would be solved by using network ciders. I ended up using iprep
modifier in a pass rule to get around my problem of ignoring MANY ip
addresses - but I still wanted to bring this to the lists attention.

cat /usr/local/etc/suricata/packet.filter

> not (net 10.0.0.0 or net 10.0.0.1 or net 10.0.0.2 or net 10.0.0.3 or net
> 10.0.0.4 or net 10.0.0.5 or net 10.0.0.6 or net 10.0.0.7 or net 10.0.0.8 or
> net 10.0.0.9 or net 10.0.0.10 or net 10.0.0.11 or net 10.0.0.12 or net
> 10.0.0.13 or net 10.0.0.14 or net 10.0.0.15 or net 10.0.0.16 or net
> 10.0.0.17 or net 10.0.0.18 or net 10.0.0.19 or net 10.0.0.20 or net
> 10.0.0.21 or net 10.0.0.22 or net 10.0.0.23 or net 10.0.0.24 or net
> 10.0.0.25 or net 10.0.0.26 or net 10.0.0.27 or net 10.0.0.28 or net
> 10.0.0.29 or net 10.0.0.30 or net 10.0.0.31 or net 10.0.0.32 or net
> 10.0.0.33 or net 10.0.0.34 or net 10.0.0.35 or net 10.0.0.36 or net
> 10.0.0.37 or net 10.0.0.38 or net 10.0.0.39 or net 10.0.0.40 or net
> 10.0.0.41 or net 10.0.0.42 or net 10.0.0.43 or net 10.0.0.44 or net
> 10.0.0.45 or net 10.0.0.46 or net 10.0.0.47 or net 10.0.0.48 or net
> 10.0.0.49 or net 10.0.0.50 or net 10.0.0.51 or net 10.0.0.52 or net
> 10.0.0.53 or net 10.0.0.54 or net 10.0.0.55 or net 10.0.0.56 or net
> 10.0.0.57 or net 10.0.0.58 or net 10.0.0.59 or net 10.0.0.60 or net
> 10.0.0.61 or net 10.0.0.62 or net 10.0.0.63 or net 10.0.0.64 or net
> 10.0.0.65 or net 10.0.0.66 or net 10.0.0.67 or net 10.0.0.68 or net
> 10.0.0.69 or net 10.0.0.70 or net 10.0.0.71 or net 10.0.0.72 or net
> 10.0.0.73 or net 10.0.0.74 or net 10.0.0.75 or net 10.0.0.76 or net
> 10.0.0.77 or net 10.0.0.78 or net 10.0.0.79 or net 10.0.0.80 or net
> 10.0.0.81 or net 10.0.0.82 or net 10.0.0.83 or net 10.0.0.84 or net
> 10.0.0.85 or net 10.0.0.86 or net 10.0.0.87 or net 10.0.0.88 or net
> 10.0.0.89 or net 10.0.0.90 or net 10.0.0.91 or net 10.0.0.92 or net
> 10.0.0.93 or net 10.0.0.94 or net 10.0.0.95 or net 10.0.0.96 or net
> 10.0.0.97 or net 10.0.0.98 or net 10.0.0.99 or net 10.0.0.100 or net
> 10.0.0.101 or net 10.0.0.102 or net 10.0.0.103 or net 10.0.0.104 or net
> 10.0.0.105 or net 10.0.0.106 or net 10.0.0.107 or net 10.0.0.108 or net
> 10.0.0.109 or net 10.0.0.110 or net 10.0.0.111 or net 10.0.0.112 or net
> 10.0.0.113 or net 10.0.0.114 or net 10.0.0.115 or net 10.0.0.116 or net
> 10.0.0.117 or net 10.0.0.118 or net 10.0.0.119 or net 10.0.0.120 or net
> 10.0.0.121 or net 10.0.0.122 or net 10.0.0.123 or net 10.0.0.124 or net
> 10.0.0.125 or net 10.0.0.126 or net 10.0.0.127 or net 10.0.0.128 or net
> 10.0.0.129 or net 10.0.0.130 or net 10.0.0.131 or net 10.0.0.132 or net
> 10.0.0.133 or net 10.0.0.134 or net 10.0.0.135 or net 10.0.0.136 or net
> 10.0.0.137 or net 10.0.0.138 or net 10.0.0.139 or net 10.0.0.140 or net
> 10.0.0.141 or net 10.0.0.142 or net 10.0.0.143 or net 10.0.0.144 or net
> 10.0.0.145 or net 10.0.0.146 or net 10.0.0.147 or net 10.0.0.148 or net
> 10.0.0.149 or net 10.0.0.150 or net 10.0.0.151 or net 10.0.0.152 or net
> 10.0.0.153 or net 10.0.0.154 or net 10.0.0.155 or net 10.0.0.156 or net
> 10.0.0.157 or net 10.0.0.158 or net 10.0.0.159 or net 10.0.0.160 or net
> 10.0.0.161 or net 10.0.0.162 or net 10.0.0.163 or net 10.0.0.164 or net
> 10.0.0.165 or net 10.0.0.166 or net 10.0.0.167 or net 10.0.0.168 or net
> 10.0.0.169 or net 10.0.0.170 or net 10.0.0.171 or net 10.0.0.172 or net
> 10.0.0.173 or net 10.0.0.174 or net 10.0.0.175 or net 10.0.0.176 or net
> 10.0.0.177 or net 10.0.0.178 or net 10.0.0.179 or net 10.0.0.180 or net
> 10.0.0.181 or net 10.0.0.182 or net 10.0.0.183 or net 10.0.0.184 or net
> 10.0.0.185 or net 10.0.0.186 or net 10.0.0.187 or net 10.0.0.188 or net
> 10.0.0.189 or net 10.0.0.190 or net 10.0.0.191 or net 10.0.0.192 or net
> 10.0.0.193 or net 10.0.0.194 or net 10.0.0.195 or net 10.0.0.196 or net
> 10.0.0.197 or net 10.0.0.198 or net 10.0.0.199 or net 10.0.0.200 or net
> 10.0.0.201 or net 10.0.0.202 or net 10.0.0.203 or net 10.0.0.204 or net
> 10.0.0.205 or net 10.0.0.206 or net 10.0.0.207 or net 10.0.0.208 or net
> 10.0.0.209 or net 10.0.0.210 or net 10.0.0.211 or net 10.0.0.212 or net
> 10.0.0.213 or net 10.0.0.214 or net 10.0.0.215 or net 10.0.0.216 or net
> 10.0.0.217 or net 10.0.0.218 or net 10.0.0.219 or net 10.0.0.220 or net
> 10.0.0.221 or net 10.0.0.222 or net 10.0.0.223 or net 10.0.0.224 or net
> 10.0.0.225 or net 10.0.0.226 or net 10.0.0.227 or net 10.0.0.228 or net
> 10.0.0.229 or net 10.0.0.230 or net 10.0.0.231 or net 10.0.0.232 or net
> 10.0.0.233 or net 10.0.0.234 or net 10.0.0.235 or net 10.0.0.236 or net
> 10.0.0.237 or net 10.0.0.238 or net 10.0.0.239 or net 10.0.0.240 or net
> 10.0.0.241 or net 10.0.0.242 or net 10.0.0.243 or net 10.0.0.244 or net
> 10.0.0.245 or net 10.0.0.246 or net 10.0.0.247 or net 10.0.0.248 or net
> 10.0.0.249 or net 10.0.0.250 or net 10.0.0.251 or net 10.0.0.252 or net
> 10.0.0.253 or net 10.0.0.254 or net 10.0.0.255 or net 10.0.1.0 or net
> 10.0.1.1 or net 10.0.1.2 or net 10.0.1.3 or net 10.0.1.4 or net 10.0.1.5 or
> net 10.0.1.6 or net 10.0.1.7 or net 10.0.1.8 or net 10.0.1.9 or net
> 10.0.1.10 or net 10.0.1.11 or net 10.0.1.12 or net 10.0.1.13 or net
> 10.0.1.14 or net 10.0.1.15 or net 10.0.1.16 or net 10.0.1.17 or net
> 10.0.1.18 or net 10.0.1.19 or net 10.0.1.20 or net 10.0.1.21 or net
> 10.0.1.22 or net 10.0.1.23 or net 10.0.1.24 or net 10.0.1.25 or net
> 10.0.1.26 or net 10.0.1.27 or net 10.0.1.28 or net 10.0.1.29 or net
> 10.0.1.30 or net 10.0.1.31 or net 10.0.1.32 or net 10.0.1.33 or net
> 10.0.1.34 or net 10.0.1.35 or net 10.0.1.36 or net 10.0.1.37 or net
> 10.0.1.38 or net 10.0.1.39 or net 10.0.1.40 or net 10.0.1.41 or net
> 10.0.1.42 or net 10.0.1.43 or net 10.0.1.44 or net 10.0.1.45 or net
> 10.0.1.46 or net 10.0.1.47 or net 10.0.1.48 or net 10.0.1.49 or net
> 10.0.1.50 or net 10.0.1.51 or net 10.0.1.52 or net 10.0.1.53 or net
> 10.0.1.54 or net 10.0.1.55 or net 10.0.1.56 or net 10.0.1.57 or net
> 10.0.1.58 or net 10.0.1.59 or net 10.0.1.60 or net 10.0.1.61 or net
> 10.0.1.62 or net 10.0.1.63 or net 10.0.1.64 or net 10.0.1.65 or net
> 10.0.1.66 or net 10.0.1.67 or net 10.0.1.68 or net 10.0.1.69 or net
> 10.0.1.70 or net 10.0.1.71 or net 10.0.1.72 or net 10.0.1.73 or net
> 10.0.1.74 or net 10.0.1.75 or net 10.0.1.76 or net 10.0.1.77 or net
> 10.0.1.78 or net 10.0.1.79 or net 10.0.1.80 or net 10.0.1.81 or net
> 10.0.1.82 or net 10.0.1.83 or net 10.0.1.84 or net 10.0.1.85 or net
> 10.0.1.86 or net 10.0.1.87 or net 10.0.1.88 or net 10.0.1.89 or net
> 10.0.1.90 or net 10.0.1.91 or net 10.0.1.92 or net 10.0.1.93 or net
> 10.0.1.94 or net 10.0.1.95 or net 10.0.1.96 or net 10.0.1.97 or net
> 10.0.1.98 or net 10.0.1.99 or net 10.0.1.100 or net 10.0.1.101 or net
> 10.0.1.102 or net 10.0.1.103 or net 10.0.1.104 or net 10.0.1.105 or net
> 10.0.1.106 or net 10.0.1.107 or net 10.0.1.108 or net 10.0.1.109 or net
> 10.0.1.110 or net 10.0.1.111 or net 10.0.1.112 or net 10.0.1.113 or net
> 10.0.1.114 or net 10.0.1.115 or net 10.0.1.116 or net 10.0.1.117 or net
> 10.0.1.118 or net 10.0.1.119 or net 10.0.1.120 or net 10.0.1.121 or net
> 10.0.1.122 or net 10.0.1.123 or net 10.0.1.124 or net 10.0.1.125 or net
> 10.0.1.126 or net 10.0.1.127 or net 10.0.1.128 or net 10.0.1.129 or net
> 10.0.1.130 or net 10.0.1.131 or net 10.0.1.132 or net 10.0.1.133 or net
> 10.0.1.134 or net 10.0.1.135 or net 10.0.1.136 or net 10.0.1.137 or net
> 10.0.1.138 or net 10.0.1.139 or net 10.0.1.140 or net 10.0.1.141 or net
> 10.0.1.142 or net 10.0.1.143 or net 10.0.1.144 or net 10.0.1.145 or net
> 10.0.1.146 or net 10.0.1.147 or net 10.0.1.148 or net 10.0.1.149 or net
> 10.0.1.150 or net 10.0.1.151 or net 10.0.1.152 or net 10.0.1.153 or net
> 10.0.1.154 or net 10.0.1.155 or net 10.0.1.156 or net 10.0.1.157 or net
> 10.0.1.158 or net 10.0.1.159 or net 10.0.1.160 or net 10.0.1.161 or net
> 10.0.1.162 or net 10.0.1.163 or net 10.0.1.164 or net 10.0.1.165 or net
> 10.0.1.166 or net 10.0.1.167 or net 10.0.1.168 or net 10.0.1.169 or net
> 10.0.1.170 or net 10.0.1.171 or net 10.0.1.172 or net 10.0.1.173 or net
> 10.0.1.174 or net 10.0.1.175 or net 10.0.1.176 or net 10.0.1.177 or net
> 10.0.1.178 or net 10.0.1.179 or net 10.0.1.180 or net 10.0.1.181 or net
> 10.0.1.182 or net 10.0.1.183 or net 10.0.1.184 or net 10.0.1.185 or net
> 10.0.1.186 or net 10.0.1.187 or net 10.0.1.188 or net 10.0.1.189 or net
> 10.0.1.190 or net 10.0.1.191 or net 10.0.1.192 or net 10.0.1.193 or net
> 10.0.1.194 or net 10.0.1.195 or net 10.0.1.196 or net 10.0.1.197 or net
> 10.0.1.198 or net 10.0.1.199 or net 10.0.1.200 or net 10.0.1.201 or net
> 10.0.1.202 or net 10.0.1.203 or net 10.0.1.204 or net 10.0.1.205 or net
> 10.0.1.206 or net 10.0.1.207 or net 10.0.1.208 or net 10.0.1.209 or net
> 10.0.1.210 or net 10.0.1.211 or net 10.0.1.212 or net 10.0.1.213 or net
> 10.0.1.214 or net 10.0.1.215 or net 10.0.1.216 or net 10.0.1.217 or net
> 10.0.1.218 or net 10.0.1.219 or net 10.0.1.220 or net 10.0.1.221 or net
> 10.0.1.222 or net 10.0.1.223 or net 10.0.1.224 or net 10.0.1.225 or net
> 10.0.1.226 or net 10.0.1.227 or net 10.0.1.228 or net 10.0.1.229 or net
> 10.0.1.230 or net 10.0.1.231 or net 10.0.1.232 or net 10.0.1.233 or net
> 10.0.1.234 or net 10.0.1.235 or net 10.0.1.236 or net 10.0.1.237 or net
> 10.0.1.238 or net 10.0.1.239 or net 10.0.1.240 or net 10.0.1.241 or net
> 10.0.1.242 or net 10.0.1.243 or net 10.0.1.244 or net 10.0.1.245 or net
> 10.0.1.246 or net 10.0.1.247 or net 10.0.1.248 or net 10.0.1.249 or net
> 10.0.1.250 or net 10.0.1.251 or net 10.0.1.252 or net 10.0.1.253 or net
> 10.0.1.254 or net 10.0.1.255 or net 10.0.2.0 or net 10.0.2.1 or net
> 10.0.2.2 or net 10.0.2.3 or net 10.0.2.4 or net 10.0.2.5 or net 10.0.2.6 or
> net 10.0.2.7 or net 10.0.2.8 or net 10.0.2.9 or net 10.0.2.10 or net
> 10.0.2.11 or net 10.0.2.12 or net 10.0.2.13 or net 10.0.2.14 or net
> 10.0.2.15 or net 10.0.2.16 or net 10.0.2.17 or net 10.0.2.18 or net
> 10.0.2.19 or net 10.0.2.20 or net 10.0.2.21 or net 10.0.2.22 or net
> 10.0.2.23 or net 10.0.2.24 or net 10.0.2.25 or net 10.0.2.26 or net
> 10.0.2.27 or net 10.0.2.28 or net 10.0.2.29 or net 10.0.2.30 or net
> 10.0.2.31 or net 10.0.2.32 or net 10.0.2.33 or net 10.0.2.34 or net
> 10.0.2.35 or net 10.0.2.36 or net 10.0.2.37 or net 10.0.2.38 or net
> 10.0.2.39 or net 10.0.2.40 or net 10.0.2.41 or net 10.0.2.42 or net
> 10.0.2.43 or net 10.0.2.44 or net 10.0.2.45 or net 10.0.2.46 or net
> 10.0.2.47 or net 10.0.2.48 or net 10.0.2.49 or net 10.0.2.50 or net
> 10.0.2.51 or net 10.0.2.52 or net 10.0.2.53 or net 10.0.2.54 or net
> 10.0.2.55 or net 10.0.2.56 or net 10.0.2.57 or net 10.0.2.58 or net
> 10.0.2.59 or net 10.0.2.60 or net 10.0.2.61 or net 10.0.2.62 or net
> 10.0.2.63 or net 10.0.2.64 or net 10.0.2.65 or net 10.0.2.66 or net
> 10.0.2.67 or net 10.0.2.68 or net 10.0.2.69 or net 10.0.2.70 or net
> 10.0.2.71 or net 10.0.2.72 or net 10.0.2.73 or net 10.0.2.74 or net
> 10.0.2.75 or net 10.0.2.76 or net 10.0.2.77 or net 10.0.2.78 or net
> 10.0.2.79 or net 10.0.2.80 or net 10.0.2.81 or net 10.0.2.82 or net
> 10.0.2.83 or net 10.0.2.84 or net 10.0.2.85 or net 10.0.2.86 or net
> 10.0.2.87 or net 10.0.2.88 or net 10.0.2.89 or net 10.0.2.90 or net
> 10.0.2.91 or net 10.0.2.92 or net 10.0.2.93 or net 10.0.2.94 or net
> 10.0.2.95 or net 10.0.2.96 or net 10.0.2.97 or net 10.0.2.98 or net
> 10.0.2.99 or net 10.0.2.100 or net 10.0.2.101 or net 10.0.2.102 or net
> 10.0.2.103 or net 10.0.2.104 or net 10.0.2.105 or net 10.0.2.106 or net
> 10.0.2.107 or net 10.0.2.108 or net 10.0.2.109 or net 10.0.2.110 or net
> 10.0.2.111 or net 10.0.2.112 or net 10.0.2.113 or net 10.0.2.114 or net
> 10.0.2.115 or net 10.0.2.116 or net 10.0.2.117 or net 10.0.2.118 or net
> 10.0.2.119 or net 10.0.2.120 or net 10.0.2.121 or net 10.0.2.122 or net
> 10.0.2.123 or net 10.0.2.124 or net 10.0.2.125 or net 10.0.2.126 or net
> 10.0.2.127 or net 10.0.2.128 or net 10.0.2.129 or net 10.0.2.130 or net
> 10.0.2.131 or net 10.0.2.132 or net 10.0.2.133 or net 10.0.2.134 or net
> 10.0.2.135 or net 10.0.2.136 or net 10.0.2.137 or net 10.0.2.138 or net
> 10.0.2.139 or net 10.0.2.140 or net 10.0.2.141 or net 10.0.2.142 or net
> 10.0.2.143 or net 10.0.2.144 or net 10.0.2.145 or net 10.0.2.146 or net
> 10.0.2.147 or net 10.0.2.148 or net 10.0.2.149 or net 10.0.2.150 or net
> 10.0.2.151 or net 10.0.2.152 or net 10.0.2.153 or net 10.0.2.154 or net
> 10.0.2.155 or net 10.0.2.156 or net 10.0.2.157 or net 10.0.2.158 or net
> 10.0.2.159 or net 10.0.2.160 or net 10.0.2.161 or net 10.0.2.162 or net
> 10.0.2.163 or net 10.0.2.164 or net 10.0.2.165 or net 10.0.2.166 or net
> 10.0.2.167 or net 10.0.2.168 or net 10.0.2.169 or net 10.0.2.170 or net
> 10.0.2.171 or net 10.0.2.172 or net 10.0.2.173 or net 10.0.2.174 or net
> 10.0.2.175 or net 10.0.2.176 or net 10.0.2.177 or net 10.0.2.178 or net
> 10.0.2.179 or net 10.0.2.180 or net 10.0.2.181 or net 10.0.2.182 or net
> 10.0.2.183 or net 10.0.2.184 or net 10.0.2.185 or net 10.0.2.186 or net
> 10.0.2.187 or net 10.0.2.188 or net 10.0.2.189 or net 10.0.2.190 or net
> 10.0.2.191 or net 10.0.2.192 or net 10.0.2.193 or net 10.0.2.194 or net
> 10.0.2.195 or net 10.0.2.196 or net 10.0.2.197 or net 10.0.2.198 or net
> 10.0.2.199 or net 10.0.2.200 or net 10.0.2.201 or net 10.0.2.202 or net
> 10.0.2.203 or net 10.0.2.204 or net 10.0.2.205 or net 10.0.2.206 or net
> 10.0.2.207 or net 10.0.2.208 or net 10.0.2.209 or net 10.0.2.210 or net
> 10.0.2.211 or net 10.0.2.212 or net 10.0.2.213 or net 10.0.2.214 or net
> 10.0.2.215 or net 10.0.2.216 or net 10.0.2.217 or net 10.0.2.218 or net
> 10.0.2.219 or net 10.0.2.220 or net 10.0.2.221 or net 10.0.2.222 or net
> 10.0.2.223 or net 10.0.2.224 or net 10.0.2.225 or net 10.0.2.226 or net
> 10.0.2.227 or net 10.0.2.228 or net 10.0.2.229 or net 10.0.2.230 or net
> 10.0.2.231 or net 10.0.2.232 or net 10.0.2.233 or net 10.0.2.234 or net
> 10.0.2.235 or net 10.0.2.236 or net 10.0.2.237 or net 10.0.2.238 or net
> 10.0.2.239 or net 10.0.2.240 or net 10.0.2.241 or net 10.0.2.242 or net
> 10.0.2.243 or net 10.0.2.244 or net 10.0.2.245 or net 10.0.2.246 or net
> 10.0.2.247 or net 10.0.2.248 or net 10.0.2.249 or net 10.0.2.250 or net
> 10.0.2.251 or net 10.0.2.252 or net 10.0.2.253 or net 10.0.2.254 or net
> 10.0.2.255 or net 10.0.3.0 or net 10.0.3.1 or net 10.0.3.2 or net 10.0.3.3
> or net 10.0.3.4 or net 10.0.3.5 or net 10.0.3.6 or net 10.0.3.7 or net
> 10.0.3.8 or net 10.0.3.9 or net 10.0.3.10 or net 10.0.3.11 or net 10.0.3.12
> or net 10.0.3.13 or net 10.0.3.14 or net 10.0.3.15 or net 10.0.3.16 or net
> 10.0.3.17 or net 10.0.3.18 or net 10.0.3.19 or net 10.0.3.20 or net
> 10.0.3.21 or net 10.0.3.22 or net 10.0.3.23 or net 10.0.3.24 or net
> 10.0.3.25 or net 10.0.3.26 or net 10.0.3.27 or net 10.0.3.28 or net
> 10.0.3.29 or net 10.0.3.30 or net 10.0.3.31 or net 10.0.3.32 or net
> 10.0.3.33 or net 10.0.3.34 or net 10.0.3.35 or net 10.0.3.36 or net
> 10.0.3.37 or net 10.0.3.38 or net 10.0.3.39 or net 10.0.3.40 or net
> 10.0.3.41 or net 10.0.3.42 or net 10.0.3.43 or net 10.0.3.44 or net
> 10.0.3.45 or net 10.0.3.46 or net 10.0.3.47 or net 10.0.3.48 or net
> 10.0.3.49 or net 10.0.3.50 or net 10.0.3.51 or net 10.0.3.52 or net
> 10.0.3.53 or net 10.0.3.54 or net 10.0.3.55 or net 10.0.3.56 or net
> 10.0.3.57 or net 10.0.3.58 or net 10.0.3.59 or net 10.0.3.60 or net
> 10.0.3.61 or net 10.0.3.62 or net 10.0.3.63 or net 10.0.3.64 or net
> 10.0.3.65 or net 10.0.3.66 or net 10.0.3.67 or net 10.0.3.68 or net
> 10.0.3.69 or net 10.0.3.70 or net 10.0.3.71 or net 10.0.3.72 or net
> 10.0.3.73 or net 10.0.3.74 or net 10.0.3.75 or net 10.0.3.76 or net
> 10.0.3.77 or net 10.0.3.78 or net 10.0.3.79 or net 10.0.3.80 or net
> 10.0.3.81 or net 10.0.3.82 or net 10.0.3.83 or net 10.0.3.84 or net
> 10.0.3.85 or net 10.0.3.86 or net 10.0.3.87 or net 10.0.3.88 or net
> 10.0.3.89 or net 10.0.3.90 or net 10.0.3.91 or net 10.0.3.92 or net
> 10.0.3.93 or net 10.0.3.94 or net 10.0.3.95 or net 10.0.3.96 or net
> 10.0.3.97 or net 10.0.3.98 or net 10.0.3.99 or net 10.0.3.100 or net
> 10.0.3.101 or net 10.0.3.102 or net 10.0.3.103 or net 10.0.3.104 or net
> 10.0.3.105 or net 10.0.3.106 or net 10.0.3.107 or net 10.0.3.108 or net
> 10.0.3.109 or net 10.0.3.110 or net 10.0.3.111 or net 10.0.3.112 or net
> 10.0.3.113 or net 10.0.3.114 or net 10.0.3.115 or net 10.0.3.116 or net
> 10.0.3.117 or net 10.0.3.118 or net 10.0.3.119 or net 10.0.3.120 or net
> 10.0.3.121 or net 10.0.3.122 or net 10.0.3.123 or net 10.0.3.124 or net
> 10.0.3.125 or net 10.0.3.126 or net 10.0.3.127 or net 10.0.3.128 or net
> 10.0.3.129 or net 10.0.3.130 or net 10.0.3.131 or net 10.0.3.132 or net
> 10.0.3.133 or net 10.0.3.134 or net 10.0.3.135 or net 10.0.3.136 or net
> 10.0.3.137 or net 10.0.3.138 or net 10.0.3.139 or net 10.0.3.140 or net
> 10.0.3.141 or net 10.0.3.142 or net 10.0.3.143 or net 10.0.3.144 or net
> 10.0.3.145 or net 10.0.3.146 or net 10.0.3.147 or net 10.0.3.148 or net
> 10.0.3.149 or net 10.0.3.150 or net 10.0.3.151 or net 10.0.3.152 or net
> 10.0.3.153 or net 10.0.3.154 or net 10.0.3.155 or net 10.0.3.156 or net
> 10.0.3.157 or net 10.0.3.158 or net 10.0.3.159 or net 10.0.3.160 or net
> 10.0.3.161 or net 10.0.3.162 or net 10.0.3.163 or net 10.0.3.164 or net
> 10.0.3.165 or net 10.0.3.166 or net 10.0.3.167 or net 10.0.3.168 or net
> 10.0.3.169 or net 10.0.3.170 or net 10.0.3.171 or net 10.0.3.172 or net
> 10.0.3.173 or net 10.0.3.174 or net 10.0.3.175 or net 10.0.3.176 or net
> 10.0.3.177 or net 10.0.3.178 or net 10.0.3.179 or net 10.0.3.180 or net
> 10.0.3.181 or net 10.0.3.182 or net 10.0.3.183 or net 10.0.3.184 or net
> 10.0.3.185 or net 10.0.3.186 or net 10.0.3.187 or net 10.0.3.188 or net
> 10.0.3.189 or net 10.0.3.190 or net 10.0.3.191 or net 10.0.3.192 or net
> 10.0.3.193 or net 10.0.3.194 or net 10.0.3.195 or net 10.0.3.196 or net
> 10.0.3.197 or net 10.0.3.198 or net 10.0.3.199 or net 10.0.3.200 or net
> 10.0.3.201 or net 10.0.3.202 or net 10.0.3.203 or net 10.0.3.204 or net
> 10.0.3.205 or net 10.0.3.206 or net 10.0.3.207 or net 10.0.3.208 or net
> 10.0.3.209 or net 10.0.3.210 or net 10.0.3.211 or net 10.0.3.212 or net
> 10.0.3.213 or net 10.0.3.214 or net 10.0.3.215 or net 10.0.3.216 or net
> 10.0.3.217 or net 10.0.3.218 or net 10.0.3.219 or net 10.0.3.220 or net
> 10.0.3.221 or net 10.0.3.222 or net 10.0.3.223 or net 10.0.3.224 or net
> 10.0.3.225 or net 10.0.3.226 or net 10.0.3.227 or net 10.0.3.228 or net
> 10.0.3.229 or net 10.0.3.230 or net 10.0.3.231)

 ~ Shane
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20160620/fcdeb8d5/attachment-0001.html>