Snort mailing list archives
Re: Stopping repeats in Snort/Acid
From: Andreas Hasenack <andreas () conectiva com br>
Date: Fri, 4 Jan 2002 17:33:06 -0200
Em Fri, Jan 04, 2002 at 09:20:06AM -0600, Madziarczyk, Jonathan escreveu:
How do I keep these from popping up? By simply investigating 6 alerts in Acid, I can generate hundreds of additional alerts. What's my solution?
You could have snort ignore your IP (something like snort src host not yourip) or use SSL in your connection, assuming acid and the database are on the same machine. Otherwise, I think you would have to encrypt traffic between the sensor and the database, between acid and the database, and between your browser and acid :) _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Stopping repeats in Snort/Acid Madziarczyk, Jonathan (Jan 04)
- Re: Stopping repeats in Snort/Acid Andreas Hasenack (Jan 04)
- Re: Stopping repeats in Snort/Acid Mike Coles (Jan 06)
- Re: Stopping repeats in Snort/Acid Frank (Jan 06)
- <Possible follow-ups>
- Re: Stopping repeats in Snort/Acid Wynn Fenwick (Jan 07)