Snort mailing list archives
Re: Event_filters don't work with in-rule threshold filters.
From: wkitty42 () windstream net
Date: Mon, 25 Apr 2016 22:14:54 -0400
On 04/25/2016 04:03 PM, Y M wrote:
Or you can use the modifysid.conf to completely remove the event_filter or modify its value per-rule to the desired value.
that's what i was aiming for with my pointer to modifysid ;) -- NOTE: No off-list assistance is given without prior approval. *Please keep mailing list traffic on the list* unless private contact is specifically requested and granted. ------------------------------------------------------------------------------ Find and fix application performance issues faster with Applications Manager Applications Manager provides deep performance insights into multiple tiers of your business applications. It resolves application problems quickly and reduces your MTTR. Get your free trial! https://ad.doubleclick.net/ddm/clk/302982198;130105516;z _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- Event_filters don't work with in-rule threshold filters. fatema bannatwala (Apr 25)
- Re: Event_filters don't work with in-rule threshold filters. wkitty42 (Apr 25)
- Re: Event_filters don't work with in-rule threshold filters. fatema bannatwala (Apr 25)
- Re: Event_filters don't work with in-rule threshold filters. Y M (Apr 25)
- Re: Event_filters don't work with in-rule threshold filters. wkitty42 (Apr 25)
- Re: Event_filters don't work with in-rule threshold filters. Y M (Apr 25)