From: <ka...@ez...> - 2005-01-05 12:36:56
|
Hi, Snort(inline) does a great job with prioritizing attacks - but spp_clamav does not put priority on anything. This kind of breaks many of the reporting tools. I was wondering if there might be a way to just make all clamav alerts show as priority 1 so things like snort_report, snorter and the like, will put them at the top? thanks Kat |