Re: Supressing alerts.

[Matt Kettler <mkettler () evi-inc com>]

At 01:34 PM 2/28/2005, mdpeters wrote:
> These are actually placed into the snort.conf file?

Yes... suppress statements can be put in your snort.conf file, or you could 
make a local suppression.rules file and add an include for it to snort.conf..

Realistically, all of the rules files and the snort.conf file are all just 
the same file anyway, so it's really a matter of using what helps you 
organize things best. 



-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users