[Snort-users] Tweaking false positives

kaidhai kaidhai at ...131...
Fri Sep 21 10:04:02 EDT 2001


Dear all,
I am receiving a large number of alerts from a specific machine (DNS) that exists in my own LAN and is trusted.  I want the alerts for such machines (ie, all such false positives) to be reduced.  Any answers to that? Thanks in advance.
Regards
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20010921/b07cf930/attachment.html>


More information about the Snort-users mailing list