[Snort-users] Supressing alerts.
mkettler at ...4108...
Mon Feb 28 11:16:27 EST 2005
At 01:34 PM 2/28/2005, mdpeters wrote:
>These are actually placed into the snort.conf file?
Yes... suppress statements can be put in your snort.conf file, or you could
make a local suppression.rules file and add an include for it to snort.conf..
Realistically, all of the rules files and the snort.conf file are all just
the same file anyway, so it's really a matter of using what helps you
organize things best.
More information about the Snort-users