[Snort-users] test a threshold rule, please?

Chris Reid chris.reid at ...3029...
Thu Aug 5 21:43:03 EDT 2004


As Rich said, he and I have exchanged private e-mails on this matter.  Rich
has tested a fix for us, and this fix has already been committed to CVS.
Thanks to everyone who helped!

Chris Reid

----- Original Message ----- 
From: "Rich Adamson" <radamson at ...2127...>
To: "sekure" <sekure at ...11827...>
Cc: "Snort Users Postings" <snort-users at lists.sourceforge.net>
Sent: Thursday, August 05, 2004 9:45 PM
Subject: Re: [Snort-users] test a threshold rule, please?


> Apparently the problem was a Win32 specifc issue that Chris rsolved. He
sent a
> private email with an executable that addressed the issue, and its now
working
> just fine. The seconds and count parameters in the example were intended
to
> generate some sample alerts, which it did following the fix. I've since
increased
> those thresholds to realistic numbers. :)
>
> Rich
>





More information about the Snort-users mailing list