Snort mailing list archives

Re: Re: +AFs-Snort-users+AF0- Re: Core on FreeBSD


From: Brian <bmc () snort org>
Date: Mon, 5 Nov 2001 15:54:14 -0500

According to Martin Roesch:
+ACM- tcp stream reassembly directive
+ACM- no arguments loads the default configuration (clientonly, ports
default,
+ACM- alerts on)

"Ports default" is working fine here, although it is somewhat redundant
(since they're the default ports...)

What I think he ment was : This is what snort.conf says.

# no arguments loads the default configuration (clientonly, ports
# default, alerts on)

I've changed the snort.conf to be a bit more like english.

# no arguments loads the default configuration
#   Only reassemble the client,
#   Only reassemble the default list of ports (See below),
#   Give alerts for "bad" streams

-brian

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: