[Snort-users] Reducing portscan allerts in logfile

Markus Gronlund markus at ...1727...
Tue Apr 3 05:24:43 EDT 2001


Hello,

Is there a way to make the portscan detector silent or only make a
single message per portscan, not 3 diffrent allert messages, 
PORTSCAN DETECTED, portscan status, End of portscan...

Running snort in -Afast mode.. 

 / Markus Grönlund
   Data Ductus





More information about the Snort-users mailing list