Hi, On Mon, 2016-06-20 at 21:58 +0200, Daniel Eschner wrote: > I there, > > is it possible to let suricata scan just one dest IP from my network > and not only the whole network? You can use BPF to have suricata only sniff one single IP. One way to run this is : suricata YOUR_OPTIONS host IP_YOU_WANNA_SCAN ++ -- Eric Leblond <eric at regit.org>