Snort mailing list archives
threshold.conf questions
From: "Guillermo Calvo" <guillermocalvo () hyperdata biz>
Date: Sun, 28 Nov 2004 11:55:48 -0500
Hi everyone I have a couple questions related with threshold.conf 1 - Can I use snort.conf variables in threshold.conf ? I'm my test I couldn't 2 - Can I suppress a rule for all src ip but just with a especific port, how? something like "suppress gen_id 1, sig_id 1394, track by_src, ip 0.0.0.0:6667 ? Thanks in advance Best Regards Guillermo Calvo
Current thread:
- threshold.conf questions Guillermo Calvo (Nov 28)
- Testy Message - Do Not Reply Michael Steele (Nov 28)
- Re: threshold.conf questions Jeremy Hewlett (Dec 01)