[Snort-users] Supressing alerts.

Matt Kettler mkettler at ...4108...
Mon Feb 28 11:16:27 EST 2005


At 01:34 PM 2/28/2005, mdpeters wrote:
>These are actually placed into the snort.conf file?

Yes... suppress statements can be put in your snort.conf file, or you could 
make a local suppression.rules file and add an include for it to snort.conf..

Realistically, all of the rules files and the snort.conf file are all just 
the same file anyway, so it's really a matter of using what helps you 
organize things best. 





More information about the Snort-users mailing list