[Snort-users] ACID: more alerts than I asked for in acid_stat_uaddr... :)

Andreas Hasenack andreas at ...814...
Tue Jun 19 19:44:05 EDT 2001


ACID from CVS (updated a few minutes ago)

I'm in the "today's unique alerts" page. There I see an alert
which has:
Total: 1
# Sensors: 1
Src addr.: 1
Dst addr.: 1
First and last: the same date/time

When I click on, say, "src addr", I get two alerts (the same signature), 
one from today, and another from another day (the day before, in my case).
The same happens if I click on "Total", I get these two results instead of
the one that happened today. 





More information about the Snort-users mailing list