[ossec-list] Lot of emails

[Leonardo Bacha Abrantes]

Hi people,

I was using tcpdump on my server and I received a lot of messages about
promiscuous mode.

Received From: (MyServer) 192.168.120.125 ->/var/log/messages
Rule: 5104 fired (level 8) -> "Interface entered in promiscuous(sniffing)
mode."
Portion of the log(s):
Jul 24 15:04:13 myserver kernel: device eth0 entered promiscuous mode

Is possible to configure ossec client to send just one email instead of
many ?


Many thanks!