Thresh is an application for Snort that manages
alert thresholding and suppression. It was
designed to assist the administrator with tuning
one or more Snort sensors. It was designed to run
under Red Hat flavors of Linux. It summarizes
Snort Alerts by alert count, allows creation and
editing of threshold.conf files, prunes your Snort
database based on your tunings, and allows you to
preview your alert suppressions before deletion.
