[Snort-users] ACID: more alerts than I asked for in acid_stat_uaddr... :)
andreas at ...814...
Tue Jun 19 19:44:05 EDT 2001
ACID from CVS (updated a few minutes ago)
I'm in the "today's unique alerts" page. There I see an alert
# Sensors: 1
Src addr.: 1
Dst addr.: 1
First and last: the same date/time
When I click on, say, "src addr", I get two alerts (the same signature),
one from today, and another from another day (the day before, in my case).
The same happens if I click on "Total", I get these two results instead of
the one that happened today.
More information about the Snort-users