[Snort-users] Snort reporting and alerting

Andreas Hasenack andreas at ...814...
Tue May 29 07:05:23 EDT 2001


Em Tue, May 29, 2001 at 10:41:52AM +0530, Sid escreveu:
> I was thinking more on the lines of getting paged as soon as i get hit. The
> problem is there are far too many false positives and the number of alerts

You could start with the more dangerous ones, and/or the ones that are less
likely to produce false positives.





More information about the Snort-users mailing list