Hey all,
This is actually my first post and was looking for some help with my new Snort install on my server. I am noticing that my logs are becoming inundated with ICMP Connection Tests and am looking for a way to suppress these:
09/15-13:37:57.287526 [**] [1:1000001:1] "ICMP connection test" [**] [Priority: 0] {ICMP}
I went into my snort.lua file to try to suppress these events but I can't find the GID and SID (I tried using 1:1000001:1 as the SID but that didn't work)
Can anyone tell me how to turn these event alerts off?
Thanks
