[Snort-users] Monitory Number of Packets

Martin Roesch roesch at ...421...
Mon Nov 6 18:02:44 EST 2000


This isn't available for Snort currently, but it shouldn't be too hard
to code up as a preprocessor.  

     -Marty

Lee Leahu wrote:
> 
> I want to monitor the number of icmp packets on my network and alert me if
> i get more that 50 in a 5 minute period.
> 
> does anybody know how to do this?
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> http://lists.sourceforge.net/mailman/listinfo/snort-users



More information about the Snort-users mailing list