[Snort-sigs] snort config

waldo kitty wkitty42 at ...3507...
Wed Dec 5 19:30:21 EST 2012


On 12/5/2012 14:36, Aisling Brennan wrote:
> Is there an option for setting threshold on a Snort signature so it slows the
> reporting down so it occurs only once per nnn secs per Src IP ie –____

yup... there's two methods that are very similar... do you want to use this in 
the rule or separately in the threshold file? each has it pluses and minuses...







More information about the Snort-sigs mailing list