Hi all, Maybe it is a stupid question, but is it not possible to configure a CIDR network to supress some alerts via threshold.conf?, for example: suppress gen_id 1, sig_id 2101201, track by_src, ip 192.168.1.0/24 If not, what can be the best strategy to accomplish this? Regards, C. L. Martinez