Are there any .pl scripts that will allow me to delete all of a specific alert or all alerts w/ that host as dst or src?Thanks,Darren

Any idea why IDSMC would show 2100 disabled for a 4.1 Sensor, but the alerts are still being generated? We've got the Welchia worm and it's killing my database.

I'm seeing fairly large numbers of false positives from workstations talking to my W2K Domain Controlers and some member servers. There is a chance that one of the in-house developed C++ client server apps are causing it, but I thought I'd see if any...

I'm attempting to setup ACS Radius to authenticate against my W2K Domain. I'm testing using Cisco Works against the Radius server. The problem I'm seeing is that the VMS radius configuration looks for the default Radius port UPD 1645. When I NMAP my ...

I'm interested in exluding a signature from all source addresses but one. Do I create an exlude for the signature using a source of 'IN', then create an Include filter on the single address? Are the rules hierarchical, in other words does a it make ...