Snort mailing list archives
RE: spp_stream4: EVASIVE RST detection
From: Steve Halligan <agent33 () geeksquad com>
Date: Fri, 13 Jul 2001 15:23:38 -0500
preprocessor stream4 noalerts ^^^^^^^^--- This should do the trick. -bill
That will kill all stream4 related alerts...I wish there were a way to selectively choose which alerts to show and which to toss. Or am I totally off base and the alerts we are discussing would be the only alerts you would see from the stream4 pp? -Steve _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: http://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- spp_stream4: EVASIVE RST detection Ralf Hildebrandt (Jul 11)
- Re: spp_stream4: EVASIVE RST detection Ralf Hildebrandt (Jul 13)
- RE: spp_stream4: EVASIVE RST detection Bill Gercken (Jul 13)
- <Possible follow-ups>
- RE: spp_stream4: EVASIVE RST detection Steve Halligan (Jul 13)
- Re: spp_stream4: EVASIVE RST detection Ralf Hildebrandt (Jul 13)