Dear all,
I try to add a suppress rule in the threshold.conf like this:
suppress gen_id 122, sig_id 1, track by_dst, 10.10.10.0/24
But snort won't start with this kind of error:
/usr/local/etc/snort/threshold.conf(4) => Suppress-Parse: argument
pairing error
Can somobody help me where exactly i'm doing wrong? thanks alot
Note: i'm using Snort 2.8.4.1_5 pkg v. 1.6
--
Regards,
Indrajaya Pitra Perdana
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
Commercial support available - https://portal.pfsense.org
