Re: Stopping repeats in Snort/Acid

[Andreas Hasenack <andreas () conectiva com br>]

Em Fri, Jan 04, 2002 at 09:20:06AM -0600, Madziarczyk, Jonathan escreveu:
>    How do I keep these from popping up?  By simply investigating 6 alerts
>    in Acid, I can generate hundreds of additional alerts.  What's my
>    solution?

You could have snort ignore your IP (something like snort src host not yourip)
or use SSL in your connection, assuming acid and the database are on the same 
machine. Otherwise, I think you would have to encrypt traffic between the 
sensor and the database, between acid and the database, and between your 
browser and acid :)


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users