Thresh

Thresh is an application for Snort that manages alert thresholding and suppression.
Download

Thresh Ranking & Summary

Advertisement

  • Rating:
  • License:
  • GPL
  • Price:
  • FREE
  • Publisher Name:
  • Matt Deren
  • Publisher web site:

Thresh Tags


Thresh Description

Thresh is an application for Snort that manages alert thresholding and suppression. Thresh is an application for Snort that manages alert thresholding and suppression. It was designed to assist the administrator with tuning one or more Snort sensors. The project was designed to run under Red Hat flavors of Linux.It summarizes Snort Alerts by alert count, allows creation and editing of threshold.conf files, prunes your Snort database based on your tunings, and allows you to preview your alert suppressions before deletion.What's New in This Release:· DB queries were corrected.· Database pruning based on suppression sets was added.· A major code cleanup was undertaken.· All errors with signature name queries were corrected along with all read/write calls to config files.· The number of 'floating' variables between POSTs on all pages was reduced. Descriptions were added to description boxes. Rule edit/delete options were added. Issues with alert counts were corrected.· A cool way was devised to do CIDR block DELETEs and SELECTs in MySQL.


Thresh Related Software