Snort cant add to suprress
-
Under Services > Snort > Alerts when I click the usual buttons to add to the suppress list the page reloads but the entry is not added. I have uninstalled and reinstalled Snort and this feature works momentarily but again the same issue returns by the next day.
How can I ensure that the GUI suppress function is always available? I do not see any errors logged under Status > System Logs
-
Hello joako,
When you goto Snort and edit the Interface where you added the suppression, look at the Settings TAB, and find
"Choose a suppression or filtering file if desired"
The file listed here, should be the suppression list for the interface.
There is a "View List" button, if you click that, does it show you the newly added Suppression's?
