[Snort-users] Seen this?

Steve Hutchins Steve.Hutchins at ...277...
Thu Mar 15 15:10:32 EST 2001


http://www.techweb.com/wire/story/TWB20010315S0009

Do you reckon they put some code like this in RS :

if (RuleTriggered) {
   return;
}

Can we have the same for snort and then make a public statement
:O):O):O):O):O):O):O)

Seriously,
They must be doing threshold analysis of some sort, 
whether in the sensor or console.
Any ideas what can be done with snort, or is the thinking that it is
not a sensor issue, but an issue for the reporting tool to deal with?

:) Steve (:




More information about the Snort-users mailing list