Snort mailing list archives

Snort queries!!


From: "mac subbu" <dnacat25 () gmail com>
Date: Mon, 6 Mar 2006 22:18:46 +0530

Hi,

Im just going about our snort deployment and would like to know what are the
best ways to carry out

1)deploying  bleeding edge signatures in the snort conf file ???...

2)event suppression--- either by local suppression. rule file   or
threshold.conf ..if threshold .conf where do i include threshold.conf in the
snort.conf file ??

Any pointers would be deeply appreciated

can we do event suppression thru oinkmaster ??

regards

Current thread: