[Snort-users] Database tools?
erek at ...950...
Wed Aug 27 07:45:26 EDT 2003
On Wed, 27 Aug 2003, Schmehl, Paul L wrote:
> > Also, I wonder if there is a wayt to simply have a threshold
> > for alerts, so if I want to only be alerted on the first 10
> > of the same 100000 alerts. Thanks.
> I don't think so, but Erik can probably give you a definitive answer.
Well, maybe. :) Snort doesn't have any sort of thresholding. The only
things that I know of that might help in that respect are swatch  or
PigSentry  (Thanks Richard!).
"When things get weird, the weird turn pro." H.S. Thompson
More information about the Snort-users