[Snort-users] problem with suppress...

sekure sekure at ...11827...
Wed Jul 14 06:13:39 EDT 2004


The relevant contents of local.rules would help.  Suppress has been
working for me without an issue for a while.

On Wed, 14 Jul 2004 15:50:04 +1000, Graeme Rider
<graeme.rider at ...12106...> wrote:
> 
> l have added suppress commands to my local.rules file but still recieve
> alerts through both acid and the alert file on the sensor.   l know that l
> can use either BPF filters or pass rules but being the stubborn person l am,
> is there anything l may have missed to get these suppressions to work.    l
> am running snort 2.2.  Any help would be grateful..
> regards
> graeme




More information about the Snort-users mailing list