Free thresholding software for linux

Thresh is an application for Snort that manages alert thresholding and suppression. It was designed to assist the administrator with tuning one or more Snort sensors. The project was designed to run under Red Hat flavors of Linux.
It summarizes Snort Alerts by alert count, allows creation and editing of threshold.conf files, prunes your Snort database based on your tunings, and allows you to preview your alert suppressions before deletion.
Enhancements:
- DB queries were corrected.
- Database pruning based on suppression sets was added.
- A major code cleanup was undertaken.
- All errors with signature name queries were corrected along with all read/write calls to config files.
- The number of floating variables between POSTs on all pages was reduced. Descriptions were added to description boxes. Rule edit/delete options were added. Issues with alert counts were corrected.
- A cool way was devised to do CIDR block DELETEs and SELECTs in MySQL.