[Prelude Hybrid IDS] #266: LML Ruleset to ignore cron jobs
"Prelude Hybrid IDS" <[email protected]>
| Newsgroups | gmane.comp.security.ids.prelude.devel |
|---|---|
| Message-ID | <[email protected]> |
#266: LML Ruleset to ignore cron jobs
-------------------------+--------------------------------------------------
Reporter: pollux | Owner: yoann
Type: enhancement | Status: new
Priority: normal | Milestone:
Component: prelude-lml | Version: 0.9
Severity: normal | Keywords:
-------------------------+--------------------------------------------------
When parsing auth.log, tons of alerts are send for cron jobs (producing
lots of noise on real events).
This is an example file to show how to ignore how to ignore such events.
--
Ticket URL: <https://trac.prelude-ids.org/ticket/266>
Prelude Hybrid IDS <http://www.prelude-ids.org>
The Prelude Hybrid Intrusion Detection System suite
_______________________________________________
Prelude-devel site list
[email protected]
http://www.prelude-ids.org/mailman/listinfo/prelude-devel