[Snort-sigs] help with time in rules

Jose A. bromistamix at ...12...
Tue Nov 6 04:01:30 EST 2012





Hello!
 
I have a question when i want to develop a rule in snort.
 
It is possible to specify the time and the number of events in the rule?
 
For example, create an alarm when the same event occurs within two minutes 10 times.
 
Thanks!
 
 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20121106/ac7f7cf1/attachment.html>


More information about the Snort-sigs mailing list