[Snort-users] Tuning snort false positives

Lyndon Tiu ltiu at ...12200...
Mon Nov 15 14:45:02 EST 2004


Look in:



/etc/snort/threshold.conf



# ICMP PING

suppress gen_id 1, sig_id 384, track by_src, ip 192.168.0.0/24

suppress gen_id 1, sig_id 384, track by_dst, ip 192.168.0.0/24



--

Lyndon Tiu




More information about the Snort-users mailing list