Problem with SWATCH for Snort logs.

[Pedro G. Méndez <pmendez () icnet com ve>]

Hi,

I'm running Snort 2.0.5 y a RH-9 machine, I'm using SWATCH-3.0.8 for real-time alerts and the command throttle don't 
work. Can anyone help me ?

My swatch configuration file is like this:
watchfor   /DNS zone transfer/
        mail=mail-account () domain com,subject=Snort Security Alert!
        throttle 30:00


Thanks in advance,

Pedro Mendez