Snort mailing list archives

Any idea?

From: John Friedman <jfriedmanx () yahoo com>
Date: Tue, 8 Nov 2005 07:32:21 -0800 (PST)

Hi ALL,
I use suppress gen_id 122, sig_id 27 to suppress open port alerts and these alerts can not be suppressed.  If I use 
suppress gen_id 122, sig_id 27, track by_src, ip 10.1.10.0/24, it works.  (if I add track by_src, trak by_dst)
 
Do you know why?
 
John
 
 

                
---------------------------------
 Yahoo! FareChase - Search multiple travel sites in one click.

Current thread:

Any idea? John Friedman (Nov 08)