RE: Standalone threshold

["Schmehl, Paul L" <pauls () utdallas edu>]

> -----Original Message-----
> From: snort-users-admin () lists sourceforge net 
> [mailto:snort-users-admin () lists sourceforge net] On Behalf Of 
> Jason Linden
> Sent: Thursday, November 13, 2003 12:44 PM
> To: snort-users () lists sourceforge net
> Subject: [Snort-users] Standalone threshold
>
> I have looked through the docs and this list and can't figure 
> where you are supposed to configure the standalone threshold 
> commands, snort.conf, *.rules files, etc.?
Jason, what do you mean by "standalone threshold commands"?

There is a README.thresholding doc that comes with the distribution that
explains how to use the keyword in a rule, but I'm not familiar with a
"standalone threshold command".

Paul Schmehl (pauls () utdallas edu)
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu/~pauls/ 


-------------------------------------------------------
This SF.Net email sponsored by: ApacheCon 2003,
16-19 November in Las Vegas. Learn firsthand the latest
developments in Apache, PHP, Perl, XML, Java, MySQL,
WebDAV, and more! http://www.apachecon.com/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users