[Oisf-users] Web aspirator detection

[Amrith Z]

Hi all,

I'm looking for a way to detect web aspiration. I'm encountering a lot a simultaneous connexions from single IPs, which are scrawling all our web pages.

Is there a way to detect aspiration, or to configure Suricata to alert when a single IP is having a lot of simultaneous connexions ?

Thx! 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20111103/adcf7ec9/attachment-0002.html>