Re: How can I filter...

[Vitaly Osipov <vosipov () wolfegroup ie>]

RTFM and comment out all the rules in icmp.conf (or maybe somewhere else
in .conf files) which match the signature you don't want to be reported
:)

regards,
Vitaly.

Fred Edwards wrote:
> I have the feeling that this question has been asked more times then I
> could count, but I would like a bit of help just the same...
>
> How can I filter out or remove the incredible amounts of "snort: ICMP
> Destination Unreachable" alerts that I get?
>
> Thanks!
>
> ============================================
> Fred Edwards
> Library Systems Technician
> Patrick Power Library
> Saint Mary's University
> Halifax, Nova Scotia    B3H 3C3
>
> Phone:    (902) 420-5096
> Fax:        (902) 420-5561
> E-mail:    Fred.Edwards () StMarys ca
> Website: http://www.stmarys.ca/administration/library/
> ============================================
>
> Quis custodiet ipsos custodes?
>
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> http://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users