[Snort-users] (no subject)

Paul O'Brien pdobrien3 at gmail.com
Sat Sep 30 18:13:10 EDT 2017


Why is this causing an error and keeping snort from starting?  I want to suppress all errors under a 2 count per minute per ip

event_filter gen_id 1, sig_id 2002878, type both, track by_src, count 2, seconds 60

Thanks,
Dan


"Better is a poor man who walks in his integrity than a rich man who is crooked in his ways." - Proverbs 28:6

Sent from my iPhone


More information about the Snort-users mailing list