[Snort-sigs] snort config

Aisling Brennan aislingbrennan21 at ...2420...
Wed Dec 5 14:36:13 EST 2012


Is there an option for setting threshold on a Snort signature so it slows
the reporting down so it occurs only once per nnn secs per Src IP ie –****

** **

event_filter sig_id sssssss, gen_id g, type limit, track by_src, count 1,
seconds nnn****

** **
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20121205/b620c97f/attachment.html>


More information about the Snort-sigs mailing list