RE: [Snort-inline-users] flag on number of packets in period of time

[Norwich U. I. S. D. <in...@no...>]
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