[Snort-users] Global thresholding definition

Peggy Kam ppkam at ...11126...
Thu Feb 3 12:07:05 EST 2005


Hi,

Can someone help?  I want to apply the same threshold and limit setting
for every rule.  I have the following defined in the threshold.conf
file:

threshold gen_id 0, sig_id 0, type both, track by_src, count 5, seconds
60

However, it does not seem to work, please help.

Thanks in advance,
Peggy






More information about the Snort-users mailing list