Snort mailing list archives
threshold.conf global suppression by IP
From: Mitch Gates <MGates () americanbus com>
Date: Fri, 9 Sep 2016 15:44:14 +0000
Is there any way I can suppress events globally from a dst or src ip rather than defining each individual gen id and sig id I want to suppress?
------------------------------------------------------------------------------
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- threshold.conf global suppression by IP Mitch Gates (Sep 09)
- Re: threshold.conf global suppression by IP Y M (Sep 09)
- <Possible follow-ups>
- Re: threshold.conf global suppression by IP Mitch Gates (Sep 09)
- Re: threshold.conf global suppression by IP Y M (Sep 09)
- Re: threshold.conf global suppression by IP Victor Roemer (Sep 09)
- Re: threshold.conf global suppression by IP Mitch Gates (Sep 12)
- Re: threshold.conf global suppression by IP Y M (Sep 12)
- Re: threshold.conf global suppression by IP Mitch Gates (Sep 12)
- Re: threshold.conf global suppression by IP wkitty42 (Sep 12)
- Re: threshold.conf global suppression by IP Y M (Sep 12)
- Re: threshold.conf global suppression by IP James Lay (Sep 12)
- Re: threshold.conf global suppression by IP Y M (Sep 09)