[Snort-users] Snort Log Method

Pedro Tedeschi pedro.tedeschi at ...6753...
Thu Aug 29 07:14:02 EDT 2002


If is possible to snort log just one unique event per IP?

Like this

The IP have attacked 345 times on same signature "WEB-IIS cmd.exe access"
But i want to log just one time this attack and discard the others attacks from this signature.

Can i do this?


Pedro Tedeschi
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20020829/8a48fe70/attachment.html>

More information about the Snort-users mailing list