Snort mailing list archives

Event Filter Questin


From: d r <dr431 () hotmail com>
Date: Mon, 12 Sep 2016 17:42:41 +0000

I was reading in threshold.conf that the threshold command is now deprecated and that you should now use filters. 
There's lots of examples of how to write one, but what file do you it in? Is it still threshold.conf?


Regards,

DR
------------------------------------------------------------------------------
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity 
planning reports. http://sdm.link/zohodev2dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Current thread: