Re: snort config

[Aisling Brennan <aislingbrennan21 () gmail com>]

Is there an option for setting threshold on a Snort signature so it slows
the reporting down so it occurs only once per nnn secs per Src IP ie –****

** **

event_filter sig_id sssssss, gen_id g, type limit, track by_src, count 1,
seconds nnn****

** **

------------------------------------------------------------------------------
LogMeIn Rescue: Anywhere, Anytime Remote support for IT. Free Trial
Remotely access PCs and mobile devices and provide instant support
Improve your efficiency, and focus on delivering more value-add services
Discover what IT Professionals Know. Rescue delivers
http://p.sf.net/sfu/logmein_12329d2d

_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!