Re: suppressing alert...

[waldo kitty <wkitty42 () windstream net>]

On 9/22/2010 22:38, Alex Tatistcheff wrote:
> Bug or no bug, I get the same result.

thank you for your report ;)

for completeness, mine is

    ,,_     -*> Snort! <*-
   o"  )~   Version 2.8.6.1 (Build 39)
    ''''    By Martin Roesch & The Snort Team: http://www.snort.org/snort/snort-team
            Copyright (C) 1998-2010 Sourcefire, Inc., et al.
            Using PCRE version: 7.8 2008-09-05


> threshold.conf
> suppress gen_id 1, sig_id 1, track by_src, ip 10.1.1.1
> suppress gen_id 1, sig_id 1, track by_src, ip 10.1.1.2
>
>
> snort output:
> Sep 22 22:30:57 Snortbox snort[4750]:
> +-----------------------[suppression]------------------------------------------
> Sep 22 22:30:57 Snortbox snort[4750]: | gen-id=1      sig-id=1
> tracking=src-ip=<list>
> Sep 22 22:30:57 Snortbox snort[4750]: | gen-id=1      sig-id=1
> tracking=src-ip=<list>
> Sep 22 22:30:57 Snortbox snort[4750]:
> -------------------------------------------------------------------------------
>
> [root@Snortbox snort]# snort -V
>
>     ,,_     -*> Snort! <*-
>    o"  )~   Version 2.8.6 (Build 38) inline
> ''''    By Martin Roesch & The Snort Team: http://www.snort.org/snort/snort-team
>             Copyright (C) 1998-2010 Sourcefire, Inc., et al.
>             Using PCRE version: 7.9 2009-04-11
>             Using ZLIB version: 1.2.3



------------------------------------------------------------------------------
Nokia and AT&T present the 2010 Calling All Innovators-North America contest
Create new apps & games for the Nokia N8 for consumers in  U.S. and Canada
$10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store 
http://p.sf.net/sfu/nokia-dev2dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users