Snort mailing list archives
Thresholding problem: ERROR: *** threshold: gen_id / *** Invalid integer input: 0
From: "Uso" <usofwd () gmx net>
Date: Wed, 30 Jun 2004 10:59:45 +0400
I'm testing the thresholding feature and am trying to implement the below global thresholding to log any event only once every 60 seconds. the example is from the snort documentation. #Limit to logging 1 event per 60 seconds per IP triggering each rule for each event generator: threshold gen_id 0, sig_id 0, type limit, track by_src, count 1, seconds 60 However I get the error: ERROR: *** threshold: gen_id *** Invalid integer input: 1 Fatal Error, Quitting appreciate any help regards Uso ------------------------------------------------------- This SF.Net email sponsored by Black Hat Briefings & Training. Attend Black Hat Briefings & Training, Las Vegas July 24-29 - digital self defense, top technical experts, no vendor pitches, unmatched networking opportunities. Visit www.blackhat.com _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Thresholding problem: ERROR: *** threshold: gen_id / *** Invalid integer input: 0 Uso (Jun 30)
- Re: Thresholding problem: ERROR: *** threshold: gen_id / *** Invalid integer input: 0 Chris Reid (Jun 30)
- Re: Thresholding problem: ERROR: *** threshold: gen_id / *** Invalid integer input: 0 Rich Adamson (Jun 30)
- Re: Thresholding problem: ERROR: *** threshold: gen_id / *** Invalid integer input: 0 Rich Adamson (Jun 30)
- Threshold rule syntax? Rich Adamson (Jun 30)
- Threshold Bug - 2.2.0-RC1 Rich Adamson (Jun 30)
- Re: Thresholding problem: ERROR: *** threshold: gen_id / *** Invalid integer input: 0 Chris Reid (Jun 30)