[Snort-users] test a threshold rule, please?
chris.reid at ...3029...
Thu Aug 5 21:43:03 EDT 2004
As Rich said, he and I have exchanged private e-mails on this matter. Rich
has tested a fix for us, and this fix has already been committed to CVS.
Thanks to everyone who helped!
----- Original Message -----
From: "Rich Adamson" <radamson at ...2127...>
To: "sekure" <sekure at ...11827...>
Cc: "Snort Users Postings" <snort-users at lists.sourceforge.net>
Sent: Thursday, August 05, 2004 9:45 PM
Subject: Re: [Snort-users] test a threshold rule, please?
> Apparently the problem was a Win32 specifc issue that Chris rsolved. He
> private email with an executable that addressed the issue, and its now
> just fine. The seconds and count parameters in the example were intended
> generate some sample alerts, which it did following the fix. I've since
> those thresholds to realistic numbers. :)
More information about the Snort-users