configurating BRO autoblock threshold question


We have our BRO systems configured to autoblock remote hosts if
several of our machines are scanned in a given day.

Question: how does one configure BRO to autoblock if only one host
is scanned over a specified number of times per day?


Ken Pon