[Snort-users] suppression of multible events by CIDR

Reece Mills reece.mills at ...6436...
Tue Aug 1 17:05:24 EDT 2006


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Is there a way to suppress all alerting by CIDR using wildcards in the
gen_id and sig_id?

Like:

suppress gen_id *, sig_id *, track by_src, ip 34.25.1.0/24

 

- --

Best Regards,
Reece Mills, GSEC
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFEz8IT9WfFCHCe/LcRAqOsAKCTzp6uEFw8Bs9HY1YKpYkh2LibJgCbBov9
wpEnVCtSx81djGjkLHTnuzs=
=lqmV
-----END PGP SIGNATURE-----




More information about the Snort-users mailing list