[Snort-users] Noisy Alert thats not in the rules?

Jeff ffejbean at ...131...
Thu Feb 23 13:38:43 EST 2012


All,
   I'm getting a ton of alerts like this:

Snort Alert [1:1000001:0]



I've put this entry in /etc/snort/threshold.conf and still I'm seeing these alerts pile up..

suppress gen_id 1, sig_id 1000001


..and I've grep'd  through /etc/snort/rules/* and find nothing. 

So.. any suggestions for a n00b as to how to get rid of these alerts?  

HELP?

thanks! 
.jeff
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20120223/1212387d/attachment.html>


More information about the Snort-users mailing list