[Snort-devel] Interesting option in ACID
borjam at ...843...
Mon Oct 15 00:16:15 EDT 2001
On Friday 12 October 2001 16:13, you wrote:
> You can already do this. Select Last 24(or 72) hours alert list. On the
> page that loads up, in the upper right hand corner, select Unique Source
> addresses, and you will get all the unique sources in the last 24(72)
It doesn't show the number of different signatures ;-) It would help to
identify the typical vulnerability scanners.
More information about the Snort-devel