Don't create directories on special events ?

[ks () schuricht de]

Hi,

is it possible to create rules that don't create directories for each
host that send packets for the selected rule ?

Why i ask ?

We have very much 'CodeRed' Attacks in our Logfiles. It's not a problem but
every day i have to delete about 400 directories created by the 'catch
codered
rules'.

Thanks!

Best regards,
  Kai.

--
Abt. eBusiness / Entwicklung
D. Schuricht GmbH & Co. KG
http://www.schuricht.de



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users