[Snort-users] Event supression problem

Zphosis De Extrodinaire zphosis at ...11562...
Sun Apr 4 21:50:05 EDT 2004

Error message: Suppress-Parse: argument pairing error

I've tried with , still the same problem.

At 12:32 PM 4/5/2004, Zphosis De Extrodinaire wrote:
>HI all,
>I'm having a problem trying to suppress the event with sig_id 620, which 
>happens to me the SCAN Proxy Attempt.
>Here's the suppress line.
>suppress gen_id 1, sig_id 620, track by dst, ip
>The line is placed below Output plugin section on snort.conf.
>Currently using snort v. 2.1.1
>Any ideas why its failing?
>This SF.Net email is sponsored by: IBM Linux Tutorials
>Free Linux tutorial presented by Daniel Robbins, President and CEO of
>GenToo technologies. Learn everything from fundamentals to system
>Snort-users mailing list
>Snort-users at lists.sourceforge.net
>Go to this URL to change user options or unsubscribe:
>Snort-users list archive:

More information about the Snort-users mailing list