[Snort-devel] Interesting option in ACID

Borja Marcos borjam at ...843...
Mon Oct 15 00:16:15 EDT 2001


On Friday 12 October 2001 16:13, you wrote:
> You can already do this.  Select Last 24(or 72) hours alert list.  On the
> page that loads up, in the upper right hand corner, select Unique Source
> addresses, and you will get all the unique sources in the last 24(72)
> hours.

	It doesn't show the number of different signatures ;-) It would help to 
identify the typical vulnerability scanners.



	Borja.




More information about the Snort-devel mailing list