[Snort-users] Event supression problem

Zphosis De Extrodinaire zphosis at ...11562...
Sun Apr 4 21:50:05 EDT 2004


Error message: Suppress-Parse: argument pairing error

I've tried with 10.10.10.111/32 , still the same problem.

At 12:32 PM 4/5/2004, Zphosis De Extrodinaire wrote:
>HI all,
>
>I'm having a problem trying to suppress the event with sig_id 620, which 
>happens to me the SCAN Proxy Attempt.
>
>Here's the suppress line.
>
>suppress gen_id 1, sig_id 620, track by dst, ip 10.10.10.111
>
>The line is placed below Output plugin section on snort.conf.
>Currently using snort v. 2.1.1
>
>Any ideas why its failing?
>
>regards,
>
>Z.
>
>
>
>-------------------------------------------------------
>This SF.Net email is sponsored by: IBM Linux Tutorials
>Free Linux tutorial presented by Daniel Robbins, President and CEO of
>GenToo technologies. Learn everything from fundamentals to system
>administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
>_______________________________________________
>Snort-users mailing list
>Snort-users at lists.sourceforge.net
>Go to this URL to change user options or unsubscribe:
>https://lists.sourceforge.net/lists/listinfo/snort-users
>Snort-users list archive:
>http://www.geocrawler.com/redir-sf.php3?list=snort-users





More information about the Snort-users mailing list