[Snort-users] Snort Log Method

Pedro Tedeschi pedro.tedeschi at ...6753...
Thu Aug 29 07:14:02 EDT 2002


Hi,

If is possible to snort log just one unique event per IP?

Like this

The IP 1.1.1.1 have attacked 345 times on same signature "WEB-IIS cmd.exe access"
But i want to log just one time this attack and discard the others attacks from this signature.

Can i do this?



Regards,

Pedro Tedeschi
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20020829/8a48fe70/attachment.html>


More information about the Snort-users mailing list