topic Re: SigEvent Action Filter in Network Security https://community.cisco.com/t5/network-security/sigevent-action-filter/m-p/547250#M98517 <HTML><HEAD></HEAD><BODY><P>Hi Darin:</P><P></P><P>I reproduced a similar scenario with signature 2004 (icmp request) that is sumarized by default and I dont get any event.</P><P>Probably is a bug of your version </P><P>I'm working with platform IDS-4215</P><P> Build version 5.0(1)S149.0</P><P> OS version 2.4.26-IDS-smp-bigphys</P><P></P><P>How about you?</P><P></P><P>Hope this helps (rate if it does)</P><P></P><P>Alberto Giorgi from spain</P></BODY></HTML> Thu, 04 May 2006 13:52:52 GMT a.giorgi 2006-05-04T13:52:52Z SigEvent Action Filter https://community.cisco.com/t5/network-security/sigevent-action-filter/m-p/547249#M98512 <P>I have created a &#147;SigEvent Action Filter&#148; to filter all TCP syn host sweep (3030) from a single host to a defined variable "set of IP addresses". The filter appears to stop alerting on all of the events except the summarized alerts. These alerts are not filtered.</P><P></P><P>Is this knowen bug?</P> Sun, 10 Mar 2019 10:00:10 GMT https://community.cisco.com/t5/network-security/sigevent-action-filter/m-p/547249#M98512 darin.marais 2019-03-10T10:00:10Z Re: SigEvent Action Filter https://community.cisco.com/t5/network-security/sigevent-action-filter/m-p/547250#M98517 <HTML><HEAD></HEAD><BODY><P>Hi Darin:</P><P></P><P>I reproduced a similar scenario with signature 2004 (icmp request) that is sumarized by default and I dont get any event.</P><P>Probably is a bug of your version </P><P>I'm working with platform IDS-4215</P><P> Build version 5.0(1)S149.0</P><P> OS version 2.4.26-IDS-smp-bigphys</P><P></P><P>How about you?</P><P></P><P>Hope this helps (rate if it does)</P><P></P><P>Alberto Giorgi from spain</P></BODY></HTML> Thu, 04 May 2006 13:52:52 GMT https://community.cisco.com/t5/network-security/sigevent-action-filter/m-p/547250#M98517 a.giorgi 2006-05-04T13:52:52Z