[Snort-users] Suppress alerts
prodger2008 at ...131...
Mon Oct 17 10:07:34 EDT 2005
Thanks! I am running Snort on windows too. I'm
using IIS6, MSSQL, PHP, and BASE on windows2003.
BTW, I just found out that the threshold.conf file is
in two plases: one is in \snort\etc folder; another is
in \snort\rules folder. Which one should I change?
I changed the one in \snort\etc folder.
How do you get genenator ID or SID?
--- "Briggs, Bruce" <Bruce.Briggs at ...13183...> wrote:
> Yes I did see your Friday e-mail.
> I am running Snort on Windows and do not have your
> Also you do not need to reboot your Snort machine
> when making a config
> change - just stop & restart Snort.
> What Snort version?
> What other support tools are you using - such as web
> server & logging
> database & alert viewer?
> I'm using Apache, MySQL, PHP, and BASE.
> -----Original Message-----
> From: Peter Rodger [mailto:prodger2008 at ...131...]
> Sent: Monday, October 17, 2005 11:52 AM
> To: Briggs, Bruce
> Subject: Fwd: RE: [Snort-users] Suppress alerts
> Did you check this message I sent you last Friday?
> The snort.conf is the right file I changed.
> What could go wrong with it?
> Thanks so much,
> Note: forwarded message attached.
> Yahoo! Mail - PC Magazine Editors' Choice 2005
Yahoo! Mail - PC Magazine Editors' Choice 2005
More information about the Snort-users